{"type":"bundle","id":"bundle--5abb11c6-93bf-ff58-2503-0000ccee9561","objects":[{"type":"marking-definition","spec_version":"2.1","id":"marking-definition--550e8400-e29b-41d4-a716-446655440000","created":"2026-08-23T09:40:43-04:00","definition_type":"tlp","name":"TLP:AMBER","definition":{"tlp":"amber"}},{"type":"indicator","spec_version":"2.1","id":"indicator--201dad11-26ee-0e6b-17b2-0000913d22b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar","pattern":"[url:value = 'http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5802b-bf0f-9963-841f-00000d545225","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/sserv.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/sserv.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6007b6-aeb7-3f0d-6daa-000037563039","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/ssj.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/ssj.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6eb3ba0-53f5-fe45-492d-00002664ccd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ff/22/6NkpoT2I_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ff/22/6NkpoT2I_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fe8fd6-cab3-9752-0655-00009b6c57e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/86/e2/nuFlPuWf_o.png","pattern":"[url:value = 'https://images2.imgbox.com/86/e2/nuFlPuWf_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdab68b9-e253-9396-775c-0000d2d91b33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ce/60/RW99SPa3_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ce/60/RW99SPa3_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa9ef7-7612-7d47-3380-00009d3ccd96","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png","pattern":"[url:value = 'https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2639638-ccff-5395-2bbb-00002daeec1a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png","pattern":"[url:value = 'https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fefca66-212b-aa8e-0d89-0000b98c321e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/.i","pattern":"[url:value = 'http://185.12.78.161:36220/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fbf8b2-fc29-c89b-8e0a-0000c4a62f45","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/.i","pattern":"[url:value = 'http://36.66.139.36:53736/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5433dc85-6d4e-acac-d41f-000081d57794","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg","pattern":"[url:value = 'http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c135933e-e379-f748-0000-0000d65c900f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","pattern":"[url:value = 'http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b219180b-0cfc-8acb-d3cb-00001e539a64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://mysura.it/njtzac0.tar","pattern":"[url:value = 'https://mysura.it/njtzac0.tar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886d6c15-e10f-df7f-838f-000014d01df3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/.i","pattern":"[url:value = 'http://94.231.164.10:6432/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792cda41-0853-9195-1416-0000cc21e356","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://191.33.171.242:55443/.i","pattern":"[url:value = 'http://191.33.171.242:55443/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8c1675-3511-411d-0023-00005eda9513","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/converting.php","pattern":"[url:value = 'https://deagroup-ks.com/converting.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5093700e-cb33-c7e5-f859-0000b8d1d3fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/approx.php","pattern":"[url:value = 'https://deagroup-ks.com/approx.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182314e-fc16-c4bf-ed4e-00004b9900bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.m","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68347d65-5f00-4945-871e-0000014fbf03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.a","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfbf6cd-a465-1208-a6f4-000005882dce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/whiz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/whiz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfae7477-fdd6-5402-696a-0000dff509d9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unexplainable.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unexplainable.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22f7366-4dcf-205f-479b-000017efe582","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unthinkably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unthinkably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e6575e8-b5de-034e-23cd-00003c17dcec","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/conditioner.php","pattern":"[url:value = 'https://kramersmarionnettes.com/conditioner.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f13a0f-6c46-9551-5407-000010391e62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/frustrating.php","pattern":"[url:value = 'https://kramersmarionnettes.com/frustrating.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57840397-6c56-4357-04da-0000cdd2ff76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/designer.php","pattern":"[url:value = 'https://kramersmarionnettes.com/designer.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdfbcf9-f331-af77-07be-0000107f234f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/fizz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/fizz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26190b8e-e4b0-0300-48a8-000098420209","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/antienuretic.php","pattern":"[url:value = 'https://kramersmarionnettes.com/antienuretic.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4269f8d9-97b3-7782-5030-00009e25f91a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/redesign.php","pattern":"[url:value = 'https://kramersmarionnettes.com/redesign.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fd863-8149-45d4-cd22-00005cd7420f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/intermission.php","pattern":"[url:value = 'https://kramersmarionnettes.com/intermission.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0872cd-74a9-3c57-4b67-00007ed3d370","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/roughness.php","pattern":"[url:value = 'https://kramersmarionnettes.com/roughness.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a93dc87-7c40-dc4e-5b0e-00005487000c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/actionably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/actionably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb8cf42-d60a-5c2e-63e1-00000eb0ec82","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php","pattern":"[url:value = 'https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7ec4c-9d9e-21e4-a871-0000678aca0c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.219.38.228:23053/.i","pattern":"[url:value = 'http://178.219.38.228:23053/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afee4b9f-0c18-43ca-6378-00005606e37d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://twu-hwt.org/scarica/","pattern":"[url:value = 'https://twu-hwt.org/scarica/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d40a875d-11f6-1fd9-6dff-000004051f0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://jawaratekno.com/rid/rid.js","pattern":"[url:value = 'https://jawaratekno.com/rid/rid.js']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eaa0918-9553-1bc6-a2b8-000001824687","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/.i","pattern":"[url:value = 'http://181.49.47.190:46516/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbda7665-41f7-d8c4-27bd-0000a509a964","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.129.177.162:26290/.i","pattern":"[url:value = 'http://181.129.177.162:26290/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43f7b1e-c22d-6e5e-826f-000098634600","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://friendsofsclarc.org/pEp/per.zip","pattern":"[url:value = 'http://friendsofsclarc.org/pEp/per.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33fbdc6d-9773-2763-7489-0000b39bbc69","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c0f53fa-8949-24b0-11c6-00004d0ca0b2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eae0d0f3-eaea-006f-3d58-000062c6afaa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c745e3b-61cb-0557-625f-0000af188a1c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ce3e4-9857-bec6-d1ef-0000cbc0520d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2755c99-9f3d-1686-5d4e-000030d55188","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e22f-c1b4-5dcb-09e5-0000c7294077","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cfbbdc-f8c8-5ad9-aa83-00007c0f212c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac0437-54eb-3987-bcae-00006e5e9cce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8870cb3-e75f-97e7-686a-0000ec075cd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b48270-7376-93a1-796f-0000653ea04b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf94755-3494-1196-c81b-0000e5583a43","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be226e-b47f-1fe1-4579-00003d547b5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e645b4-7e58-11cc-da5d-0000f246ef89","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff1d279-e41e-c821-aacc-0000d6e27389","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e65d34-b6e2-3bbb-2bd4-000091686c8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/i386","pattern":"[url:value = 'http://75.119.134.80/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea3f824-8fa0-8698-e2a2-00005888324b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/armv7l","pattern":"[url:value = 'http://75.119.134.80/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da1712-4229-379f-bd0e-000088518d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1566150-5c38-58ef-23ba-00006624c598","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e244df38-af1c-c77f-daf2-0000a91fad3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f1c1421-f936-4dbc-8f64-0000f756e26c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50435d-5b14-591e-c347-0000202db525","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38cb9ba-6aa9-69c2-45b9-0000edb6e431","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6529fef-004a-26c2-bcf4-0000257474e8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://2.57.122.121/ping","pattern":"[url:value = 'http://2.57.122.121/ping']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea798067-b41c-c9db-ab91-0000abb4c932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Mozi.a","pattern":"[url:value = 'http://81.16.123.55:41567/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4081af0-70f3-4501-a377-0000ff444473","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm5","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d014b4a-287c-3b87-f1ad-0000edf1eb9d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm6","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930f2a66-c897-a979-ea36-000047f82316","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b487ef0a-c676-918c-edda-000053db396c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.sh4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec673c93-6eba-0470-cfd6-0000ab06ceef","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.x86","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66071de2-bde0-6a98-7938-00003f18b8b9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/i","pattern":"[url:value = 'http://98.103.171.36:19021/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14280d6b-6d92-bae6-eb29-000030efb7cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/i","pattern":"[url:value = 'http://103.90.207.234:55903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163b4358-40f9-a52a-6e05-0000fc86cf52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/i","pattern":"[url:value = 'http://91.92.82.180:17789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d368b2-5017-3271-250e-000080520dd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/i","pattern":"[url:value = 'http://213.6.74.138:39286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f8b23f-d0fa-398f-5350-0000bed451e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/i","pattern":"[url:value = 'http://93.123.169.160:27058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--726f021e-ed84-eb89-ddef-00000df5d5ed","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/i","pattern":"[url:value = 'http://190.113.124.155:64726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1adce486-ba0d-3ad3-4482-0000a4b98a91","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/i","pattern":"[url:value = 'http://186.154.93.81:8125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5330578c-0ad9-2d96-c01b-0000cf7a5c26","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/i","pattern":"[url:value = 'http://103.245.10.51:56156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a843ceb-5f01-2cc2-c090-0000c8e74463","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.101.83:1609/i","pattern":"[url:value = 'http://213.6.101.83:1609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49129a4-5553-36d0-627a-0000e9498cdf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.84.212.18:20781/i","pattern":"[url:value = 'http://154.84.212.18:20781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790ba65e-c8ae-3a09-83f1-0000fddb848a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/i","pattern":"[url:value = 'http://103.227.118.45:56789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17942180-96d9-605d-eb93-00006ebe1c87","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/i","pattern":"[url:value = 'http://36.66.139.36:53736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d2ef8c-aa02-8712-8051-0000ad62fbf8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/i","pattern":"[url:value = 'http://37.57.33.51:49049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea6df56-06d0-35a2-a191-0000a552c87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/i","pattern":"[url:value = 'http://94.251.5.51:31559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c28abe6f-835a-46b6-9340-0000c0d62079","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/i","pattern":"[url:value = 'http://36.88.180.115:20043/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9322b204-5b60-56ab-561d-0000f0ec603f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/i","pattern":"[url:value = 'http://181.49.47.190:46516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46457c30-3132-40e5-f227-00005521239d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/i","pattern":"[url:value = 'http://185.71.69.198:34190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff91e3d1-f448-ea70-e0a7-00008a6619ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/i","pattern":"[url:value = 'http://109.108.84.121:28531/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5776503c-7248-4bd4-1f4d-0000dadad050","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/i","pattern":"[url:value = 'http://41.77.74.90:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e26fe9-1203-5160-11b9-0000fe245a2d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/i","pattern":"[url:value = 'http://103.187.151.107:1500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45262dd7-7052-44f4-6eab-00008e97b94c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.151.56.42:28186/i","pattern":"[url:value = 'http://46.151.56.42:28186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc57a8c-1339-5aef-1582-000022870062","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/i","pattern":"[url:value = 'http://89.216.100.166:30359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e457a4-93a8-ffd2-7253-0000789a5d62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/i","pattern":"[url:value = 'http://94.231.164.10:6432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931fd70-5176-088c-0f15-0000504bb22d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/i","pattern":"[url:value = 'http://77.89.245.118:44811/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbcecd6-abf1-3500-c685-00004d6e4f20","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/i","pattern":"[url:value = 'http://212.73.75.84:60761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccefcaf3-cb2c-efbe-f3f1-0000425448c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3a88fc-e6d6-2030-fc60-00007dfe04a0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/i","pattern":"[url:value = 'http://82.114.200.50:48416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff16f034-69f1-7c84-3449-0000377c5cf1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/i","pattern":"[url:value = 'http://78.26.180.129:37261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a27a98-eec0-86af-504a-0000ea7eff28","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://58.145.168.170:25222/i","pattern":"[url:value = 'http://58.145.168.170:25222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdcb37aa-6f6e-6c42-bb0e-0000bc2826e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/i","pattern":"[url:value = 'http://138.122.43.76:56486/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c6cdaa-e17a-3727-554d-00002cca53cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/i","pattern":"[url:value = 'http://124.194.46.204:44528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd932ef-d338-7b91-9df7-000044b7ec4d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/i","pattern":"[url:value = 'http://37.252.66.188:12165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6931023-487c-b1ca-b28d-0000edb96d4e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/i","pattern":"[url:value = 'http://190.2.237.104:65088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8af92c-fa7c-5524-4a92-00000d32ca6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/i","pattern":"[url:value = 'http://167.250.193.253:19901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e22ef5b-78db-f5ba-9ec4-000098192aa6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/i","pattern":"[url:value = 'http://200.61.163.235:27538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2836c14f-697f-f40f-0a85-000092ebfced","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.193.59.78:39941/i","pattern":"[url:value = 'http://181.193.59.78:39941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad3fd6-12db-03b5-b11b-00008dcbf97f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.78.201.3:62330/i","pattern":"[url:value = 'http://202.78.201.3:62330/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ece8278-07c9-6795-7788-0000dbfd6956","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.114:10702/i","pattern":"[url:value = 'http://154.0.129.114:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f31d1b-fa04-6929-684d-00003fddc615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://149.255.10.46:32625/i","pattern":"[url:value = 'http://149.255.10.46:32625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3b0c8c-d29b-8fe0-d288-000001e70109","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/i","pattern":"[url:value = 'http://178.188.30.171:14759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e341958-69a2-856f-e16a-00002c6d6715","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/i","pattern":"[url:value = 'http://178.151.143.2:21623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d0cddb-79b2-0f76-4b04-00008d2de45c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/i","pattern":"[url:value = 'http://181.211.252.34:1808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8dc6000-5590-0044-f7bc-00001eeeb04e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/i","pattern":"[url:value = 'http://188.72.6.218:43597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd19386-9672-bd24-befa-0000ba7619bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/i","pattern":"[url:value = 'http://185.236.46.120:45209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c236341-2399-ace2-e510-00006999eb33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/i","pattern":"[url:value = 'http://202.148.20.138:24291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ae47f6-5015-769e-228b-0000cb691d25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/i","pattern":"[url:value = 'http://200.69.219.25:6584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c1414e-ce0d-7cbf-e407-00008b73697f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/i","pattern":"[url:value = 'http://202.148.18.218:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36af24be-1274-bd2b-db48-00008c37c95d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/.i","pattern":"[url:value = 'http://212.73.75.84:60761/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55bd325-1f71-b017-b997-00009c5cdfc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.92.68.241:27066/.i","pattern":"[url:value = 'http://36.92.68.241:27066/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd311bb4-e0d5-7249-ff3e-0000cec9d87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/.i","pattern":"[url:value = 'http://178.188.30.171:14759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0948af72-da33-236b-1032-0000f29b901d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/.i","pattern":"[url:value = 'http://77.89.245.118:44811/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db82bdad-31c1-a059-617e-0000770bb9bf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/.i","pattern":"[url:value = 'http://94.251.5.51:31559/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7969b318-48aa-3340-c83a-00001dc59398","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.122.211.138:31644/.i","pattern":"[url:value = 'http://200.122.211.138:31644/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781f0df6-6f89-0271-5351-00007d99390c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/.i","pattern":"[url:value = 'http://78.26.180.129:37261/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa6e72-3cde-0cc6-8a07-00006e7ef520","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/.i","pattern":"[url:value = 'http://138.122.43.76:56486/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30312057-6c97-1428-2bb8-000059df5933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.92.143.90:65469/.i","pattern":"[url:value = 'http://109.92.143.90:65469/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222096f4-47f4-08c2-b644-00005ace93d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.190.20.228:46441/.i","pattern":"[url:value = 'http://185.190.20.228:46441/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f687df6f-592a-e554-8db0-0000c2810616","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/.i","pattern":"[url:value = 'http://81.16.242.236:28115/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83207f6e-4d27-a896-1b1c-000025f6e6f6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/.i","pattern":"[url:value = 'http://103.90.207.234:55903/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d331835-d190-c5f6-4020-0000eb1d9bc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/.i","pattern":"[url:value = 'http://185.236.46.120:45209/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57922d43-e195-3b66-34b2-0000b881dee7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://79.175.42.206:7773/.i","pattern":"[url:value = 'http://79.175.42.206:7773/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8494265-a663-f08a-5b3e-00007725981e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/.i","pattern":"[url:value = 'http://202.148.18.218:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed146b0c-4974-4c84-0148-000061bfda36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/.i","pattern":"[url:value = 'http://82.114.200.50:48416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a329bdd2-d6c5-d9e2-12cc-000069a2ecca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/.i","pattern":"[url:value = 'http://190.113.124.155:64726/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280e7169-796f-f4bb-8170-000062ecd099","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/.i","pattern":"[url:value = 'http://81.16.123.55:41567/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--427c6490-cea5-d503-b573-000051476ea8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/.i","pattern":"[url:value = 'http://202.148.18.220:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f54d4d-7198-5664-3836-000004346cb6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://193.106.58.174:32789/.i","pattern":"[url:value = 'http://193.106.58.174:32789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaee7b-ce91-28d9-0485-000031470703","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/.i","pattern":"[url:value = 'http://213.6.74.138:39286/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb9a63-b72d-a12a-019a-000039ff4900","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/.i","pattern":"[url:value = 'http://185.71.69.198:34190/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419c24f7-b477-9877-b482-00004cac1e73","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/.i","pattern":"[url:value = 'http://202.5.50.108:15808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1729f853-a682-c307-fcaf-0000045b2689","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/.i","pattern":"[url:value = 'http://118.71.250.6:28411/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc50dd1-8a81-7586-3a02-0000269d5220","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/.i","pattern":"[url:value = 'http://190.2.237.104:65088/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d04e731-a1e7-0fd4-ba99-0000c78d6b16","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.140.32.219:12617/.i","pattern":"[url:value = 'http://78.140.32.219:12617/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b291d19d-c983-90a3-9e1e-00001e963933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.170.119.100:1863/.i","pattern":"[url:value = 'http://95.170.119.100:1863/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf20d36-6281-6d98-c7db-0000328d31cd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/.i","pattern":"[url:value = 'http://91.92.82.180:17789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0910ef-696c-a817-66fd-000065d6787b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/.i","pattern":"[url:value = 'http://103.245.10.51:56156/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a13422-0100-6dcc-2e17-0000d544b7e1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/.i","pattern":"[url:value = 'http://181.211.252.34:1808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd31e5c2-a88f-0755-e8f1-0000148a00ae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/.i","pattern":"[url:value = 'http://89.216.100.166:30359/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8684bc2-9bcb-a7fe-25da-000036b978cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/.i","pattern":"[url:value = 'http://95.158.175.214:23270/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ec33d3-a4a2-f20c-30e2-0000266e05fd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/.i","pattern":"[url:value = 'http://188.72.6.218:43597/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--766ce564-f5a0-e4b3-232b-0000dca50cfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/.i","pattern":"[url:value = 'http://41.77.74.90:10702/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc33a3c-1e99-bca9-851e-0000fec314c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/.i","pattern":"[url:value = 'http://93.123.169.160:27058/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f3bdd6-a8a0-ef4c-7c2c-000008ad7f27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/.i","pattern":"[url:value = 'http://202.148.20.138:24291/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d4e16dd-445b-cb00-8f1f-0000fcdb3a80","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/.i","pattern":"[url:value = 'http://200.69.219.25:6584/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ec968-00ca-1374-4921-0000bf3d0d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/.i","pattern":"[url:value = 'http://37.252.66.188:12165/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5b4349-6cda-aebb-2d0c-0000acd067c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.69/curl","pattern":"[url:value = 'http://66.71.242.69/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a231935-de1f-ba28-fe92-0000efb1baa5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.70/curl","pattern":"[url:value = 'http://66.71.242.70/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500790ec-ec4f-1532-1ee6-0000bbab7383","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.68/curl","pattern":"[url:value = 'http://66.71.242.68/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1512239-3acb-743c-50d5-00006412bc52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.67/curl","pattern":"[url:value = 'http://66.71.242.67/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffcadef-c6cb-f2e9-1572-0000f96aae5f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/i","pattern":"[url:value = 'http://190.145.205.178:6360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f12239-26e3-883f-3ba9-0000b2c41fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/i","pattern":"[url:value = 'http://212.107.232.167:21838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f301f-4ac8-aa50-ee1e-0000da29cb8a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/i","pattern":"[url:value = 'http://116.58.51.90:1162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb6e7a5e-82a9-6d7f-4e8a-0000ed8e9bfc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/i","pattern":"[url:value = 'http://109.245.220.229:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d6b634-f201-9e0b-587f-00000a3b76ca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/i","pattern":"[url:value = 'http://151.236.247.230:19193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2790a190-d3cc-d2e7-0cfe-00004e76e395","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/i","pattern":"[url:value = 'http://202.148.5.34:35700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fae81a6-6f38-d451-8b69-00003a754306","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.155:59323/.i","pattern":"[url:value = 'http://182.253.115.155:59323/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ee236-70e0-e270-8c27-0000b2d8e357","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.249.96:46703/.i","pattern":"[url:value = 'http://81.16.249.96:46703/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7817cdb0-bf03-6899-d8f8-0000ccaf9702","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/.i","pattern":"[url:value = 'http://151.236.247.230:19193/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a97cec56-098d-8c50-1d44-0000373f96f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/.i","pattern":"[url:value = 'http://202.148.5.34:35700/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2923628-7ce4-87dd-6422-000055353139","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/.i","pattern":"[url:value = 'http://109.87.223.241:39478/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e99699-088a-c9a5-9d65-0000f879b197","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/.i","pattern":"[url:value = 'http://212.107.232.167:21838/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c7ad76-aca5-5a77-f0dd-0000baa3c42f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/.i","pattern":"[url:value = 'http://116.58.51.90:1162/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691eecf7-3da2-8c40-5db5-00004c39a111","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/.i","pattern":"[url:value = 'http://190.145.205.178:6360/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54cfd3a-95e1-0e8d-5ce7-000003f2b776","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/.i","pattern":"[url:value = 'http://109.245.220.229:44759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49dd828-01aa-2170-af99-00000577f2ac","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/.i","pattern":"[url:value = 'http://88.116.62.226:52714/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc92216-c67f-c786-1af2-0000a9d7a677","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/.i","pattern":"[url:value = 'http://89.231.14.137:2282/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9530ce-3de9-59c7-dd86-00003064af66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1123/sshd","pattern":"[url:value = 'http://68.226.36.150:1123/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f052ddec-bcad-7bb4-9de5-0000e57de710","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1109/sshd","pattern":"[url:value = 'http://174.71.237.86:1109/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36375b21-40ab-90b4-a52f-00002c0b48df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.45:8088/sshd","pattern":"[url:value = 'http://102.68.74.45:8088/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447f759e-14d1-f1de-9b49-00009109310e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.222.113.214:49012/sshd","pattern":"[url:value = 'http://31.222.113.214:49012/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a089775-c60f-f45f-b5ce-000096977bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50003/sshd","pattern":"[url:value = 'http://91.164.39.142:50003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270da7cd-2f92-3415-815b-0000f2f61609","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50004/sshd","pattern":"[url:value = 'http://91.164.39.142:50004/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec517468-a4de-721a-9b8a-0000e58d024a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50005/sshd","pattern":"[url:value = 'http://91.164.39.142:50005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ab1445-8f6f-4411-6c0a-0000ed8da7e0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://112.4.110.42:37782/sshd","pattern":"[url:value = 'http://112.4.110.42:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c8f38-17e3-4784-4445-00006ba3399d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37782/sshd","pattern":"[url:value = 'http://223.108.58.15:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec9f666-aaa5-1874-f3cf-00001872ce6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8027/sshd","pattern":"[url:value = 'http://165.73.108.6:8027/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c9fe8a-dac5-bd88-7cf3-000070536d8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1103/sshd","pattern":"[url:value = 'http://174.71.237.86:1103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b856650-e02b-fe2f-490b-000036bfd0ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.250.54.75:84/sshd","pattern":"[url:value = 'http://46.250.54.75:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be963f59-b17d-44bb-2ba3-0000d6a94c62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.14.38.66:1081/sshd","pattern":"[url:value = 'http://80.14.38.66:1081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e558b470-3b69-ab05-34c2-0000459e9f61","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8023/sshd","pattern":"[url:value = 'http://165.73.108.6:8023/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a890157b-49a5-163d-f758-00006b68b7e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8021/sshd","pattern":"[url:value = 'http://165.73.108.6:8021/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b312ad8-9f3a-f686-113f-00004959ed6f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.13:37782/sshd","pattern":"[url:value = 'http://223.108.58.13:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688b0624-9789-8f5b-3caf-0000e70256d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1112/sshd","pattern":"[url:value = 'http://24.234.159.5:1112/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4765cc-759e-1900-da08-00009cf16144","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.93.103.10:51080/sshd","pattern":"[url:value = 'http://212.93.103.10:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41e8d1-2f13-81fa-db41-0000ef411287","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:83/sshd","pattern":"[url:value = 'http://178.176.204.250:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c015f81-2f67-6266-12c6-00005ea54508","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1101/sshd","pattern":"[url:value = 'http://174.71.237.86:1101/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac506c6-bfee-8c0e-3e36-0000dc003e8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50006/sshd","pattern":"[url:value = 'http://91.164.39.142:50006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c0b7-ef41-2e12-45fb-000044963dfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.0.241.65:8082/sshd","pattern":"[url:value = 'http://31.0.241.65:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3539cf6e-a027-5d7b-5932-0000a558e038","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9114/sshd","pattern":"[url:value = 'http://118.69.157.212:9114/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7284a433-e3df-e065-445a-0000f2e520c1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.170.32.148:84/sshd","pattern":"[url:value = 'http://188.170.32.148:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9ab9f6-1613-89cc-24f1-000060e225ea","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://144.6.87.144:2400/sshd","pattern":"[url:value = 'http://144.6.87.144:2400/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15444d0-855e-c404-baf5-000081ec6f83","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50002/sshd","pattern":"[url:value = 'http://91.164.39.142:50002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50cf67b6-5939-b070-817c-000014c2e51d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50008/sshd","pattern":"[url:value = 'http://91.164.39.142:50008/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36407d6d-d404-4c13-981c-000058345bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.173.70.100:86/sshd","pattern":"[url:value = 'http://31.173.70.100:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c39716-8be7-4f0e-e83b-0000d0b015ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8029/sshd","pattern":"[url:value = 'http://165.73.108.6:8029/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f45edd-4af6-adca-45fe-0000efcfa577","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9111/sshd","pattern":"[url:value = 'http://118.69.157.212:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ccc6de-a8f1-dad3-0c15-00007c13a3a4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8020/sshd","pattern":"[url:value = 'http://165.73.108.6:8020/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3301576d-0815-b4f9-9a4f-00003684e6eb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8025/sshd","pattern":"[url:value = 'http://165.73.108.6:8025/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c9e36b-0d49-770b-d221-0000271fbb25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1122/sshd","pattern":"[url:value = 'http://68.226.36.150:1122/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ed0141-11e2-a22b-974a-0000428e0dad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.2.229.122:8003/sshd","pattern":"[url:value = 'http://185.2.229.122:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0728db53-f57f-282f-a976-0000cdf5616e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9219/sshd","pattern":"[url:value = 'http://118.69.157.212:9219/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0467d5-7a43-1478-ef9d-000052e58b22","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8022/sshd","pattern":"[url:value = 'http://165.73.108.6:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e934023d-9a87-2597-c5ca-0000cb47a5b3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.148.194.54:9013/sshd","pattern":"[url:value = 'http://82.148.194.54:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc372318-30b5-62d6-b357-0000e05765d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.66.30.68:9013/sshd","pattern":"[url:value = 'http://92.66.30.68:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c029bfea-b2ab-ab9f-308b-000071ec3a03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002//sshd","pattern":"[url:value = 'http://188.147.175.138:5002//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed47f6bf-785b-5e0a-429f-0000902a6e66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:84//sshd","pattern":"[url:value = 'http://178.176.204.250:84//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a778760-1758-d281-cbb7-0000060264a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8085/sshd","pattern":"[url:value = 'http://76.53.38.126:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32921bb3-bd62-e2ae-8f25-000084593c27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10005/sshd","pattern":"[url:value = 'http://123.143.141.75:10005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77bf266b-1e4c-151e-def6-000028f44c21","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8087/sshd","pattern":"[url:value = 'http://76.53.38.126:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ff9d24-0a20-a6ac-96d6-000022dfb07a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8086/sshd","pattern":"[url:value = 'http://81.42.247.62:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550c8f0b-6548-1060-9d37-00004d8e62b5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8888/sshd","pattern":"[url:value = 'http://76.53.38.126:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce3f5ce-8fe7-b1f4-03cf-00003f8f5862","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8086/sshd","pattern":"[url:value = 'http://76.53.38.126:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9edbf052-e6a2-c841-9b18-00009ef3550f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://141.134.214.217:8003/sshd","pattern":"[url:value = 'http://141.134.214.217:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac33f4a7-2720-e1ae-30b7-0000e7414b48","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.230.215.65/sshd","pattern":"[url:value = 'http://95.230.215.65/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de2057b-8257-3ae3-f88f-00009fa1b593","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.82.83.143:8888/sshd","pattern":"[url:value = 'http://223.82.83.143:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46bef8a-b30a-5c5b-bb0f-00001b528cbf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8085/sshd","pattern":"[url:value = 'http://81.42.247.62:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62320c97-8be6-8498-a5b1-00006848f535","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8083/sshd","pattern":"[url:value = 'http://81.42.247.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2772b7d8-8c1e-900f-9d75-00006263096e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8082/sshd","pattern":"[url:value = 'http://76.53.38.126:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a34e81-7bf1-a88f-b7a1-000035a4a439","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8087/sshd","pattern":"[url:value = 'http://81.42.247.62:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d76571a-54cb-5d85-8643-0000a95b7c0f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8057/sshd","pattern":"[url:value = 'http://80.24.87.77:8057/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b67057-6c87-b882-02c5-000090b81267","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8080/sshd","pattern":"[url:value = 'http://178.183.208.134:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f373c2f-02b1-e4bd-623e-00000c2998fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8084/sshd","pattern":"[url:value = 'http://81.42.247.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123ad67b-d84c-ada8-f713-0000bdbc7926","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://132.255.192.122:9001/sshd","pattern":"[url:value = 'http://132.255.192.122:9001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78eaa3f2-1e76-d05b-4705-000087c30624","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8081/sshd","pattern":"[url:value = 'http://178.183.208.134:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde20096-bd62-1d29-3bfc-000043ec0205","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002/sshd","pattern":"[url:value = 'http://188.147.175.138:5002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96edf32-ea21-8ea1-51c2-00007f33e176","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8082/sshd","pattern":"[url:value = 'http://81.42.247.62:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562a84bf-1efe-3f2d-e350-0000be20684c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8056/sshd","pattern":"[url:value = 'http://80.24.87.77:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f748a-de02-1213-11dd-0000de8f6a11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1111/sshd","pattern":"[url:value = 'http://24.234.159.5:1111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fade35-3700-672b-370b-000094059105","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.216.105.81/sshd","pattern":"[url:value = 'http://102.216.105.81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1928c7-0380-f910-0446-000059a0c3da","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:50080/sshd","pattern":"[url:value = 'http://212.3.211.157:50080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569add76-ffae-3049-9c4c-000080469012","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.77.57.16:8585/sshd","pattern":"[url:value = 'http://82.77.57.16:8585/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c42e33-c5b6-4edd-355f-00004555111b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37780/sshd","pattern":"[url:value = 'http://223.108.58.15:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b406691d-652a-384d-99d5-0000bdd400e2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10006/sshd","pattern":"[url:value = 'http://123.143.141.75:10006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf20095-5fd9-55a3-bac7-00005c1dac9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://221.10.233.217:8618/sshd","pattern":"[url:value = 'http://221.10.233.217:8618/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9909bfa6-6748-6efb-7d3f-000033026e36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1393e0d-8a00-603d-a184-0000e26e4559","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://170.210.81.104/tftp","pattern":"[url:value = 'http://170.210.81.104/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e47cd1-95af-2bd4-bf72-00005cd00ad0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.57.39.2:19001/tftp","pattern":"[url:value = 'http://202.57.39.2:19001/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47f4f30-9c6a-9806-bc9a-000067469fbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.108.63.242/tftp","pattern":"[url:value = 'http://190.108.63.242/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4406037d-4d31-db52-dca7-00006a11481f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.72.167.124/tftp","pattern":"[url:value = 'http://182.72.167.124/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01688c2a-c676-8f24-62c3-000015f3b8b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.224.107.4:8580/tftp","pattern":"[url:value = 'http://185.224.107.4:8580/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12c14d8-1a87-5e9a-e9fc-00006b9a9a71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.184.185.198:4443/tftp","pattern":"[url:value = 'http://89.184.185.198:4443/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c38f2b-4cd8-de65-33ef-00007e18fb11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://45.118.79.103:8892/tftp","pattern":"[url:value = 'http://45.118.79.103:8892/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4b679c-fa50-f7ad-e96d-0000cbcd61d8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d50b85-8f30-3ca5-4e90-000006c56352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://down.ftp21.cc/TQ.jpg","pattern":"[url:value = 'http://down.ftp21.cc/TQ.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe5e032-2ffd-347b-367b-00005d8791f0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.175.101.203/02.08.2022.exe","pattern":"[url:value = 'http://85.175.101.203/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5055372-1d8e-e43e-963b-000042ff033d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips","pattern":"[url:value = 'http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a1ae5ee-6e44-1463-b501-0000896146dd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f899a86-5107-2c0e-5372-00000e047b97","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l","pattern":"[url:value = 'http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9449f7c3-1524-65c7-bc34-00003362e36d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d06d68-c395-53f6-8e28-0000e43218fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ca59f1-c76a-ed43-32ff-000050b89103","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc","pattern":"[url:value = 'http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--509e529c-70dc-ec0e-8443-00009f4585ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l","pattern":"[url:value = 'http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d630c78d-2366-bbd9-1aa5-0000bff9bc8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k","pattern":"[url:value = 'http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8752dd32-0752-61f4-af66-0000626aff5d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53630681-d14c-1acd-e60c-00009660a32e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49da0564-9f3f-1fb2-927e-0000a0d9e994","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l","pattern":"[url:value = 'http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d02a06-ca42-879d-60a9-0000194327c5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64","pattern":"[url:value = 'http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--568971f3-9a26-0fe5-c149-0000e1b4fb42","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin","pattern":"[url:value = 'http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103c748f-f495-9a19-321e-00007a23d976","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1562f475-2f05-09e0-7f92-00007520cbcd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc","pattern":"[url:value = 'http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--402a2b52-26a0-a44e-cf2c-000036858b8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586","pattern":"[url:value = 'http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7979937f-f761-2195-865c-0000d86e7afb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2954ce42-37c8-aff9-2bb8-0000be177304","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0305393b-2d1b-34ed-b0d3-0000a2a636e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3d65cda-fdbc-e396-cfd6-00000dd69032","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bb0667-a6cd-a77e-cf76-0000b3075539","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.121.250.206:8080/tftp","pattern":"[url:value = 'http://89.121.250.206:8080/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329858d5-774e-05e5-3634-0000f3827e6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:81/tftp","pattern":"[url:value = 'http://93.182.76.169:81/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c2a7b-d08d-e2e2-6335-0000ca0f42a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:82/tftp","pattern":"[url:value = 'http://93.182.76.169:82/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01acabc2-0b7e-7e27-6dae-0000f4ce8d60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.104.213.45:6004/tftp","pattern":"[url:value = 'http://190.104.213.45:6004/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e216cea-3e66-9833-f633-0000d5222413","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://103.54.153.49/XClient.exe","pattern":"[url:value = 'https://103.54.153.49/XClient.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ef6dd-7e3d-e2e9-47b0-000024761b76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://soft.wsyhn.com/soft/wnbsqv3008.exe","pattern":"[url:value = 'https://soft.wsyhn.com/soft/wnbsqv3008.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcaf34b6-34dd-cf8f-1fdb-0000c8e68a5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.166.211.222:6202/sshd","pattern":"[url:value = 'http://109.166.211.222:6202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5f2567-829a-3db2-7f75-0000aac90484","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.69:8055/sshd","pattern":"[url:value = 'http://102.68.74.69:8055/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73bcabc9-f415-11de-54ea-0000e52c7297","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/i","pattern":"[url:value = 'http://178.211.135.170:12768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af6b7cd8-c6be-5c0c-3dd9-00002e06afa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://83.218.189.21:5195/i","pattern":"[url:value = 'http://83.218.189.21:5195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5a8c80-a433-a8f0-36bb-000009cb315c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/i","pattern":"[url:value = 'http://202.105.196.30:52286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7208653-9bdd-85c0-d029-0000cc3bcaf5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.238.209.82:26331/i","pattern":"[url:value = 'http://77.238.209.82:26331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bc404b-0740-7776-b92b-0000ba1797ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/i","pattern":"[url:value = 'http://77.46.170.18:53326/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b4bb80-f6b3-3a24-9c7a-0000de7e5eb9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/i","pattern":"[url:value = 'http://88.116.62.226:52714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e71873-e741-fcb7-d004-00001eb47c95","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/i","pattern":"[url:value = 'http://206.214.35.106:20647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975576b2-ac4f-00be-bff2-000050c8144c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/i","pattern":"[url:value = 'http://184.185.30.182:29029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5844c9-28ee-dbf5-d67c-00009badbba8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.91.236.237:10713/i","pattern":"[url:value = 'http://213.91.236.237:10713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad21f1f-9fdc-1d90-a12d-0000468b1caf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/i","pattern":"[url:value = 'http://41.78.75.186:30763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d88e3eab-b4ed-3dd1-ea55-00006a9e42ad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.131.234.26:51118/i","pattern":"[url:value = 'http://202.131.234.26:51118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8054de7-43a6-85c9-b6f3-00006d664694","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/i","pattern":"[url:value = 'http://212.98.186.8:6819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ba3536-a5a6-0236-8061-00005d154451","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/i","pattern":"[url:value = 'http://109.160.87.2:31378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9d16f2-f512-3205-41ad-0000d010b864","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/i","pattern":"[url:value = 'http://88.135.26.83:32710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c8e76-2c65-ba16-5b57-00002e659813","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/i","pattern":"[url:value = 'http://78.26.81.99:58230/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8f739-3488-d25e-590b-00005c3cc7f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/i","pattern":"[url:value = 'http://176.221.111.222:2282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73be984d-fdf1-b6c1-abc4-00001975c5d7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.57.69.125:16138/i","pattern":"[url:value = 'http://185.57.69.125:16138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11f4abc-4280-2f44-ea15-0000bface811","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/i","pattern":"[url:value = 'http://203.160.56.67:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75b3810-bce9-3f93-a04b-00000376d2fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/Mozi.m","pattern":"[url:value = 'http://103.187.151.107:1500/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad9a08d-f86d-f9a5-418b-00004c931bae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/Mozi.m","pattern":"[url:value = 'http://184.185.30.182:29029/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282116d3-90c9-3de1-df5c-00002b486b66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://121.43.104.75:8080/help.scr","pattern":"[url:value = 'http://121.43.104.75:8080/help.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--865de2ec-87a9-a151-f48f-00002d1cd0cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/Mozi.m","pattern":"[url:value = 'http://212.98.186.8:6819/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f993840-14a4-671c-2c40-00001aa05ffa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/Mozi.m","pattern":"[url:value = 'http://91.92.82.180:17789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2776ee12-58e6-5f26-ddb1-0000924f38fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/Mozi.m","pattern":"[url:value = 'http://103.227.118.45:56789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93f450b0-2b78-e327-b6c7-00003143d07c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/Mozi.m","pattern":"[url:value = 'http://78.26.81.99:58230/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31519ed3-07dd-4e4a-bb22-000088170800","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/Mozi.m","pattern":"[url:value = 'http://41.78.75.186:30763/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0c184c-adff-a3ab-029c-0000065be514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/Mozi.m","pattern":"[url:value = 'http://36.66.139.36:53736/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c7d2c7-e1b0-53eb-00c9-0000d6983514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/Mozi.m","pattern":"[url:value = 'http://203.160.56.67:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52325864-0eec-923d-a799-0000011da0dc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/Mozi.m","pattern":"[url:value = 'http://176.221.111.222:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f57fde3-8f41-39ab-c875-00000bcf70df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/Mozi.m","pattern":"[url:value = 'http://77.46.170.18:53326/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3461dc1-62a5-0841-1d2f-000004c83193","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/Mozi.m","pattern":"[url:value = 'http://213.6.74.138:39286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49024309-8051-d3ad-3c14-0000cefd0382","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.160.102.188:16079/Mozi.m","pattern":"[url:value = 'http://182.160.102.188:16079/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9541f4-fe2d-6b55-6735-00002fbc8742","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/Mozi.m","pattern":"[url:value = 'http://185.236.46.120:45209/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90061387-9f3c-0f2f-041f-00009880ac9c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.218:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f296e91-69a5-ac9f-39c3-0000b16b4903","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/Mozi.m","pattern":"[url:value = 'http://200.61.163.235:27538/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ac1ab3-c0cb-d01d-2885-00005c231017","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/Mozi.m","pattern":"[url:value = 'http://178.151.143.2:21623/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e4613c-07d9-c189-a3a9-000002862515","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/Mozi.m","pattern":"[url:value = 'http://88.135.26.83:32710/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc4cdd0-823f-61af-ca36-00009ba2dfb8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/Mozi.m","pattern":"[url:value = 'http://178.211.135.170:12768/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b51b934d-89c8-a06b-083d-00005c3d4bbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/Mozi.m","pattern":"[url:value = 'http://88.116.62.226:52714/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--181d644f-c116-a603-3d92-0000ed274d31","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://183.81.156.121:12929/Mozi.m","pattern":"[url:value = 'http://183.81.156.121:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a7716b-eab0-fa58-71d5-0000ce621fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/Mozi.m","pattern":"[url:value = 'http://41.77.74.90:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cc66d73-12ee-195a-e025-00000095e1b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.134:10702/Mozi.m","pattern":"[url:value = 'http://154.0.129.134:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e683f2b-8999-7704-1643-0000dbd92f67","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/Mozi.m","pattern":"[url:value = 'http://81.16.242.236:28115/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b63845-2758-3451-92de-0000b7baa063","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/Mozi.m","pattern":"[url:value = 'http://89.231.14.137:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f851ed-6873-1646-0673-0000458a100f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/Mozi.m","pattern":"[url:value = 'http://186.154.93.81:8125/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc723566-814d-a7cf-561d-0000a4162066","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/Mozi.m","pattern":"[url:value = 'http://98.103.171.36:19021/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dede90b8-461f-59ad-4fc7-00002f119f11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/Mozi.m","pattern":"[url:value = 'http://109.160.87.2:31378/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71e3e35a-30ef-41b9-839e-0000d90dfd54","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.203.50:40889/Mozi.m","pattern":"[url:value = 'http://118.179.203.50:40889/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0aae09-6954-d5d8-ed15-00002bf606f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/Mozi.m","pattern":"[url:value = 'http://178.188.30.171:14759/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89a3c9f-9534-578a-5d92-00006110b93e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/Mozi.m","pattern":"[url:value = 'http://95.158.175.214:23270/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb086f25-35d0-ac0b-eb77-0000264e3e14","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.217.215.238:17645/Mozi.m","pattern":"[url:value = 'http://103.217.215.238:17645/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c8ba2d-8328-3b16-f4d5-00004f769c3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/Mozi.m","pattern":"[url:value = 'http://185.12.78.161:36220/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352eb645-0f98-63d2-2244-0000ec6e0e41","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/Mozi.m","pattern":"[url:value = 'http://109.87.223.241:39478/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517e5541-e7cc-d242-5a53-0000f55f5722","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/Mozi.m","pattern":"[url:value = 'http://138.122.43.76:56486/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594a79cd-9b99-99ff-bc4b-000005f52ad5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/Mozi.m","pattern":"[url:value = 'http://206.214.35.106:20647/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda69d25-8066-b4ce-001b-000031aa3392","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/Mozi.m","pattern":"[url:value = 'http://181.211.252.34:1808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7c1368-5d19-78d7-c0d9-00008aeea37c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/Mozi.m","pattern":"[url:value = 'http://202.148.20.138:24291/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1309d001-5334-c3c0-d283-00000d505231","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.121.235:1123/Mozi.m","pattern":"[url:value = 'http://118.179.121.235:1123/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098afc35-f9d8-d4ba-b889-000063b2a653","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/Mozi.m","pattern":"[url:value = 'http://77.89.245.118:44811/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e85aab3-c4ff-f593-e6e2-0000fa542615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/Mozi.m","pattern":"[url:value = 'http://103.90.207.234:55903/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac5c972-8e63-68fc-d4ce-00005235a352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/Mozi.m","pattern":"[url:value = 'http://37.57.33.51:49049/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e658a7a-64a6-631b-1191-000051a44d70","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://195.34.91.22:61437/Mozi.m","pattern":"[url:value = 'http://195.34.91.22:61437/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f882049-6e58-a62c-8bfb-0000fddadc1e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.255.217.87:32902/Mozi.m","pattern":"[url:value = 'http://37.255.217.87:32902/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a6823e-19df-8fef-8639-0000ec837131","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/Mozi.m","pattern":"[url:value = 'http://190.113.124.155:64726/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fed1-cd4f-f378-280c-00006dbd32c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.156:59323/Mozi.m","pattern":"[url:value = 'http://182.253.115.156:59323/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33e87e4-785b-0fba-1728-0000ef3e2e56","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/Mozi.m","pattern":"[url:value = 'http://202.5.50.108:15808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22267c8-8451-42a1-d564-000094163e60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.220:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a30630-d5c9-a49e-d3ad-0000c998f53c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/Mozi.m","pattern":"[url:value = 'http://124.194.46.204:44528/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a39fb9-d7e9-78b4-8c65-000087ffe4af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/Mozi.m","pattern":"[url:value = 'http://181.49.47.190:46516/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1e6bde-adc2-91a5-c724-00000f67d265","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/Mozi.m","pattern":"[url:value = 'http://118.71.250.6:28411/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95c0690-99ea-9e90-c642-00003de247ce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/Mozi.m","pattern":"[url:value = 'http://36.88.180.115:20043/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72d1747-4264-c28f-83cc-0000c1ff06af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/Mozi.m","pattern":"[url:value = 'http://167.250.193.253:19901/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d7aed8-64d1-ffc3-0c97-00005fdff707","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/Mozi.m","pattern":"[url:value = 'http://94.251.5.51:31559/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--255763b5-9a79-5bd3-c468-00008c3c8543","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/Mozi.m","pattern":"[url:value = 'http://109.108.84.121:28531/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1f3f98-e09e-b5ee-21bc-0000d2a08b64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/Mozi.m","pattern":"[url:value = 'http://202.105.196.30:52286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a4ff9d-0900-8570-1024-00004322f46e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/Mozi.m","pattern":"[url:value = 'http://37.252.66.188:12165/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa3726d-f5fd-5750-135c-0000e6aff4f4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.212.35.175:8081/sshd","pattern":"[url:value = 'http://118.212.35.175:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e071eb-d4e3-2b4f-1c5f-0000c7efd002","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:85/sshd","pattern":"[url:value = 'http://178.183.205.197:85/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7c26-30cb-0d85-e212-0000da5825a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://14.161.6.225:8888/sshd","pattern":"[url:value = 'http://14.161.6.225:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0f3e32-1bdb-b105-7089-000002e372a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10062/sshd","pattern":"[url:value = 'http://81.45.183.125:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd783586-ec48-d2b1-ff1e-0000ed211999","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10072/sshd","pattern":"[url:value = 'http://81.45.183.125:10072/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05aba1c-5644-31de-feab-000074dee1d2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.43.16.137:8093/sshd","pattern":"[url:value = 'http://185.43.16.137:8093/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef130b2d-1576-c411-8b38-0000a3a908e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10097/sshd","pattern":"[url:value = 'http://213.96.13.100:10097/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eccb3265-089a-341e-af2a-00005bac03c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8085/sshd","pattern":"[url:value = 'http://87.97.161.106:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea800426-fa65-8d3e-4ff3-000041623932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8083/sshd","pattern":"[url:value = 'http://89.35.233.220:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92d178-e04f-1397-7b2e-000028b67a4a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8083/sshd","pattern":"[url:value = 'http://87.97.161.106:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0e1caa-c59f-f98f-40de-00002156ed9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.203.169.41/sshd","pattern":"[url:value = 'http://92.203.169.41/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5f40cb-55d7-3c5a-2fa7-000062213f05","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8086/sshd","pattern":"[url:value = 'http://87.97.161.106:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409983ca-305b-b718-45fa-0000f133b610","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.28.228.106:9014/sshd","pattern":"[url:value = 'http://80.28.228.106:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c147688-732d-fe2f-2b1c-000078ef05f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8080/sshd","pattern":"[url:value = 'http://89.35.233.220:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6afd433-f3c8-0644-4d96-00007166a0c3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.191.89.122:1591/sshd","pattern":"[url:value = 'http://185.191.89.122:1591/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21dcd783-5af9-8dc4-30cd-000056192d71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8082/sshd","pattern":"[url:value = 'http://89.35.233.220:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11900a4-f9e7-de01-eff0-00004e6c1863","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.130.160.219:37783/sshd","pattern":"[url:value = 'http://85.130.160.219:37783/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4740345-0113-5cf3-4761-0000fe62ecc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:86/sshd","pattern":"[url:value = 'http://178.183.205.197:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69877983-9035-3634-9fbc-00009a243422","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10094/sshd","pattern":"[url:value = 'http://213.96.13.100:10094/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b27f13e-2657-2f08-bc56-0000722ee898","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://166.147.146.187:8044/sshd","pattern":"[url:value = 'http://166.147.146.187:8044/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2132dc-9149-9d2f-a2a9-0000d1fccd0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.217.114:1026/sshd","pattern":"[url:value = 'http://109.207.217.114:1026/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc623c84-cd90-aa4a-896d-0000c2058fb5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:51080/sshd","pattern":"[url:value = 'http://212.3.211.157:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4346c2c7-3588-9266-fc7d-000006e59441","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.216.197:1031/sshd","pattern":"[url:value = 'http://109.207.216.197:1031/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c19ef30a-2e83-5471-04ef-0000d1c7cc84","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://data.yhydl.com:20006/file/XW_Setup.exe","pattern":"[url:value = 'http://data.yhydl.com:20006/file/XW_Setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc24820-1d9d-d7da-9766-000081f16504","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/x.rar","pattern":"[url:value = 'http://119.192.128.163:28080/docs/x.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f86c17-72dc-8523-cc51-00009731ae0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/solr.sh","pattern":"[url:value = 'http://119.192.128.163:28080/docs/solr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18041886-0ce2-af9d-8826-000094b87ec4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.152.219.150:8182/tftp","pattern":"[url:value = 'http://185.152.219.150:8182/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab940d12-e18b-9ce9-6cd4-0000a9181b0b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.247.218.186:49052/i","pattern":"[url:value = 'http://103.247.218.186:49052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f65b6c-3b0d-15a2-47a5-0000b82aa4dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://154.73.64.24:41934/i","pattern":"[url:value = 'http://154.73.64.24:41934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa716c34-6312-12ba-81cb-0000395e6d19","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.171.188.254:17418/i","pattern":"[url:value = 'http://181.171.188.254:17418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44895c92-c583-fed2-aed7-0000888b00a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.255.216.26:25260/i","pattern":"[url:value = 'http://43.255.216.26:25260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01aea97b-5989-0574-079b-0000e2794b51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://159.250.122.151:8081/Photo.scr","pattern":"[url:value = 'http://159.250.122.151:8081/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dc7012-65bd-3791-9b6b-00004b8ed5b1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.ppc","pattern":"[url:value = 'http://103.163.119.220/Aqua.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a24f8c-2ff9-5c49-e320-000053603646","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.arm5","pattern":"[url:value = 'http://103.163.119.220/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c019-d557-53dc-34e1-000097704d94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE","pattern":"[url:value = 'http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f22b35-9c80-7bac-5f67-0000f3150c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.x86_64","pattern":"[url:value = 'http://103.163.119.220/Aqua.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c6acf74-b8d4-e916-daa1-0000468bc689","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.dbg","pattern":"[url:value = 'http://103.163.119.220/Aqua.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac71dec-270f-f20b-809a-0000aee257cf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.85.166.12:22448/.i","pattern":"[url:value = 'http://212.85.166.12:22448/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99304d82-6ec7-eae9-7d85-000075c98b3d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/.i","pattern":"[url:value = 'http://93.87.31.84:40955/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7688ded-752b-15f2-784d-0000980809e6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/.i","pattern":"[url:value = 'http://89.216.107.99:65414/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031524f2-6e03-9da2-b111-0000de03e75e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/.i","pattern":"[url:value = 'http://216.155.92.203:3956/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48c3ea9-36bb-cd79-0f4d-00008714f7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/.i","pattern":"[url:value = 'http://47.49.114.179:27254/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9d45b6-ee14-37c1-3430-0000361593cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://186.138.107.5:14491/.i","pattern":"[url:value = 'http://186.138.107.5:14491/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67f8dbb6-6adb-6a68-609c-0000e40fa191","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mpsl","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71553755-03bb-4560-cd1c-00001507accb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm6","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85c66ef-b18c-9b42-d67d-000007b20325","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm5","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22a1d7f-b98d-d41b-ede5-00008f0ccfdb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mips","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065207c3-0247-c3c9-edbf-0000adbbcbae","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm7","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7add5d8-dd2e-2daf-7cb1-000023c4cffe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.mips","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c471893-2fc9-3777-f055-000061800f01","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a42d9e51-3800-d168-bb10-00003315fa6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.ppc","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d5cf64-ad1c-b6c6-96fc-00000173cb8b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm7","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddbae48-b6a7-90b2-4a06-0000ab7a0300","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm5","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899faf9f-6647-328b-9cb8-00004b169419","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.x86","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b65ae12-9b89-fce9-4106-0000e688365b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O","pattern":"[url:value = 'https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9a8b54-8da4-5d40-63b3-0000576ef8c5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.73.75.82:33920/i","pattern":"[url:value = 'http://212.73.75.82:33920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dece9c7f-6a1e-75d4-b259-00000af340bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/i","pattern":"[url:value = 'http://93.87.31.84:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e88b94-a71c-080d-eb22-000078ca7ea1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8051/sshd","pattern":"[url:value = 'http://195.34.102.234:8051/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7cdde8e-2f27-d58e-e44d-0000e5b3256f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.88.189:802/sshd","pattern":"[url:value = 'http://2.54.88.189:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8009109-0ec6-6a7a-fe42-000093fdc5a2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8061/sshd","pattern":"[url:value = 'http://195.34.102.234:8061/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edbb2c-7605-f74d-9ec5-00001cab1368","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8056/sshd","pattern":"[url:value = 'http://195.34.102.234:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135c42ac-fe91-af76-aa69-00008486d1e1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8060/sshd","pattern":"[url:value = 'http://195.34.102.234:8060/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69ae403-3c98-386a-94e4-0000dcf8b7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30460/sshd","pattern":"[url:value = 'http://117.240.155.245:30460/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d294ea-0267-8390-b4ac-00002df3ec7e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30490/sshd","pattern":"[url:value = 'http://117.240.155.245:30490/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5c010-f0ab-59c4-7f1e-0000d5131789","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30420/sshd","pattern":"[url:value = 'http://117.240.155.245:30420/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b2779d-c631-d0dc-866a-000044ac539c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.247.101.63:2000/sshd","pattern":"[url:value = 'http://117.247.101.63:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733dda8d-ba83-19ae-b32b-00003e24ac8a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30410/sshd","pattern":"[url:value = 'http://117.240.155.245:30410/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a59f5e-91de-1de7-5b41-0000c2318740","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30480/sshd","pattern":"[url:value = 'http://117.240.155.245:30480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec609647-cd47-1994-621d-0000eb0a92c3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30380/sshd","pattern":"[url:value = 'http://117.240.155.245:30380/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f8d394-db8e-6b52-d2e8-0000171fb909","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30310/sshd","pattern":"[url:value = 'http://117.240.155.245:30310/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411df719-420e-be91-687c-0000df7ac6b3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30250/sshd","pattern":"[url:value = 'http://117.240.155.245:30250/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a35ce74-878a-c83a-7601-0000a444bbcb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30120/sshd","pattern":"[url:value = 'http://117.240.155.245:30120/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a2cba4-c67a-5b60-8135-00003ad17cb7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30430/sshd","pattern":"[url:value = 'http://117.240.155.245:30430/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee67c2bd-8006-7b70-e3cd-000013ea6934","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30330/sshd","pattern":"[url:value = 'http://117.240.155.245:30330/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e5fb4e-245d-4bb6-c569-0000a95acb8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30140/sshd","pattern":"[url:value = 'http://117.240.155.245:30140/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c440df58-8a90-7fe4-c834-0000e6a5a222","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://111.74.21.155:5011/sshd","pattern":"[url:value = 'http://111.74.21.155:5011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa6b585-32e9-3007-ed22-0000b58fc0ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/i","pattern":"[url:value = 'http://47.49.114.179:27254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06cf6e58-614a-c4a2-5f8f-0000667ca3a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.93.83.124:11028/i","pattern":"[url:value = 'http://182.93.83.124:11028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828da79d-8eba-eb59-2b86-000073f2bb3c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/i","pattern":"[url:value = 'http://89.216.107.99:65414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c902843d-059f-521f-6274-000069240fc7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.244.113.217:53408/i","pattern":"[url:value = 'http://94.244.113.217:53408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c3b92c-f1e1-74d6-4843-0000f24b7cd4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14.0.204.188/sshd","pattern":"[url:value = 'http://14.0.204.188/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40abc838-6160-7472-b2e0-00009c29d6e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.142.63.8:24860/i","pattern":"[url:value = 'http://94.142.63.8:24860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22481751-1a3b-78a0-2c57-0000e48c4c3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-64bit.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-64bit.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ec8f00-5360-bbf3-f9ef-0000e1d16f3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-arm.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-arm.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7c314-4df0-d1b8-58b2-000017398d69","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1192/sshd","pattern":"[url:value = 'http://62.56.225.99:1192/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8b10b1-9b8d-921a-5f24-00000042992a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1193/sshd","pattern":"[url:value = 'http://62.56.225.99:1193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5388d9-84b0-c397-ab76-000077165962","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png","pattern":"[url:value = 'https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2f9244-e4c3-f603-a16d-00006b43b55f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.20.19.72:8009/sshd","pattern":"[url:value = 'http://185.20.19.72:8009/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561d0cf8-8bc2-4435-8c06-000080124445","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.215.129.223/sshd","pattern":"[url:value = 'http://117.215.129.223/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ff8213-69b8-6308-26d0-0000cea14d52","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9011/sshd","pattern":"[url:value = 'http://92.66.30.68:9011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13213a0-55d2-d826-f40b-00008436081d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9014/sshd","pattern":"[url:value = 'http://92.66.30.68:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6ec005-c383-d7d2-443f-0000934d1c5e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9015/sshd","pattern":"[url:value = 'http://92.66.30.68:9015/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913cc96c-4eb6-3a62-7b11-000080ec67fb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:28888/sshd","pattern":"[url:value = 'http://182.109.0.22:28888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4cb1d9-4887-b34e-7493-0000f49ad91e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10014/sshd","pattern":"[url:value = 'http://80.11.36.4:10014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab53d6a-f77f-0bcb-1df0-000060d5044f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.58:37379/i","pattern":"[url:value = 'http://222.165.237.58:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44145afe-aa4f-5061-4c56-000011a27a93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/i","pattern":"[url:value = 'http://216.155.92.203:3956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdce2929-6a56-6ddd-4764-0000fb704820","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.59:37379/i","pattern":"[url:value = 'http://222.165.237.59:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5a2471-b619-adc2-b3b5-0000db131e7f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.60:37379/i","pattern":"[url:value = 'http://222.165.237.60:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac0cf7-3533-7920-8e2c-0000372880e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.62:37379/i","pattern":"[url:value = 'http://222.165.237.62:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0b726f-abaa-f718-0803-00003d260b35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:18888/sshd","pattern":"[url:value = 'http://182.109.0.22:18888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0eded6-e40b-d8e5-c26d-00008571c994","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8081/sshd","pattern":"[url:value = 'http://178.183.70.63:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c67fdd-5994-803a-258d-0000ab87e112","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8083/sshd","pattern":"[url:value = 'http://178.183.70.63:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59f9cc0-2085-d491-6715-0000d89d9898","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8085/sshd","pattern":"[url:value = 'http://178.183.70.63:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23067311-294d-09f5-9886-000004e303ca","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://46.175.139.20:11074/i","pattern":"[url:value = 'http://46.175.139.20:11074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3068efac-ca17-adc5-7718-0000be9be7d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.159.221.33:9269/i","pattern":"[url:value = 'http://103.159.221.33:9269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38313782-b6d7-330c-c811-0000d71e2a76","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.22:65481/i","pattern":"[url:value = 'http://114.31.8.22:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c8644b-aaa4-9be7-976f-00001c97c34b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://twitch.tj/","pattern":"[url:value = 'https://twitch.tj/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8e71a2-7569-39f1-2656-000012ae2a0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10018/sshd","pattern":"[url:value = 'http://80.11.36.4:10018/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2682e06-89e5-aa24-c937-0000b895d9e8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/armv7l","pattern":"[url:value = 'http://198.166.72.242/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2157227c-c3a9-c880-9db6-0000fb2056cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/arm7","pattern":"[url:value = 'http://198.166.72.242/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de6ddbb-888e-9dd9-08d2-00004082a87d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/aarch64","pattern":"[url:value = 'http://198.166.72.242/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389ba5d5-779c-a844-2b0a-0000cb99b02d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/libmod_hellocpp_42.so","pattern":"[url:value = 'http://47.89.173.214:8888/libmod_hellocpp_42.so']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b209fd3f-bde1-7c0e-e525-0000038fc0e5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/asdf","pattern":"[url:value = 'http://47.89.173.214:8888/asdf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0705c69f-94a2-7030-b0b1-0000eff33e23","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/ffff","pattern":"[url:value = 'http://47.89.173.214:8888/ffff']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f356af5-b182-c5d0-aebf-00008ed8b314","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/xxxx","pattern":"[url:value = 'http://47.89.173.214:8888/xxxx']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b3a50b-2b0d-fe16-785d-0000793b008d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048b71b7-7153-91ad-c5a5-00007829bf20","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mipsle","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e348a7cf-e4f3-47eb-696d-0000f7c477bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b9d7885-8d3d-f809-fc7c-00007ad080e9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm8x64_be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm8x64_be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ea98aa-44c1-0f4f-e265-0000d9de967a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.42.154:40955/i","pattern":"[url:value = 'http://93.87.42.154:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f001759c-0578-5c27-6b62-00002530b9ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64le","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83b5657-7c17-06f5-3b8b-0000c06f6e95","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://95.62.202.150:10071/sshd","pattern":"[url:value = 'http://95.62.202.150:10071/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f72e4b0-22ae-9913-8db7-0000b5319d29","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.89.62.19:63814/i","pattern":"[url:value = 'http://36.89.62.19:63814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b182f2-5543-7428-3e30-0000f7e59b94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://112.4.110.28:37780/sshd","pattern":"[url:value = 'http://112.4.110.28:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f2f7c9-2a95-4ab3-5d65-000062460c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64len32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64len32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cf0fbd-9e49-5f61-4245-0000b5b3ebb4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2e57f4-04c7-8053-fb82-00006f975845","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64e6500","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ecf2fa-7715-67bc-d821-0000c3139ed5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv4","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe293d6-5946-8d22-3c9c-0000691a565e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv6","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bc06a4-dfbd-3fe8-99ae-0000be8ae80a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38135356-f020-a261-21b1-0000896f58dd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl1001","pattern":"[url:value = 'http://31.170.22.205/dl1001']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102fccb-567f-2a23-bf05-00003f8bf3a3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca79925b-db52-62d1-573d-0000fe31a535","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d02598-fbf8-9184-5378-00006956ae24","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64lepower8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64lepower8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5620b9-8a3c-8c43-991e-0000297550ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64power8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64power8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ab0e4f-f8e5-6290-bd0d-00005037d889","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.riscv32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.riscv32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5a340-e526-64b9-c501-0000d1a6313b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60da79-30eb-a86c-4599-000099335a77","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arcle750d","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arcle750d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a433bb-5912-390a-33ac-000018ad567f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.i686","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e807a-ef90-4608-ca50-00001a404c75","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpce500mc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpce500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf94eab-e15f-6b6d-1014-00008bc0df10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64n32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64n32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b19f5dd-a35a-fd6c-5e22-00007c875e6e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl18","pattern":"[url:value = 'http://31.170.22.205/dl18']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf0bb4fb-28d7-8ba7-dddf-00005a9c6b14","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mips","pattern":"[url:value = 'http://160.187.146.122/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f327802d-0942-81b5-c336-00005a6abdce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/m68k","pattern":"[url:value = 'http://160.187.146.122/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb9fbda-7a10-1852-fd03-0000319dc6cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/spc","pattern":"[url:value = 'http://160.187.146.122/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c749ed1-28cd-ff2e-ae20-0000c0970804","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm6","pattern":"[url:value = 'http://160.187.146.122/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24d744d-a390-ccb2-5ccb-0000cf0ada10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/x86","pattern":"[url:value = 'http://160.187.146.122/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfff4583-f251-0ef7-8f7c-0000b709b465","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/ppc","pattern":"[url:value = 'http://160.187.146.122/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad97232-e027-c229-ac40-0000319f055e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mpsl","pattern":"[url:value = 'http://160.187.146.122/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857dcf6b-0367-d894-9938-0000d222a7ea","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm5","pattern":"[url:value = 'http://160.187.146.122/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beef2e2c-0d5a-1146-2fbf-0000fe930c51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl20","pattern":"[url:value = 'http://31.170.22.205/dl20']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b49c2a2-75f7-e384-d032-0000d84680d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/c.sh","pattern":"[url:value = 'http://160.187.146.122/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5432026a-e892-5162-87ff-00004bd7380e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/w.sh","pattern":"[url:value = 'http://160.187.146.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ecdf4f-96a5-7467-b100-000020acf817","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.64.14.250:38834/i","pattern":"[url:value = 'http://36.64.14.250:38834/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8100335d-25fd-5178-ac15-000064799dfc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://82.102.74.238:36868/i","pattern":"[url:value = 'http://82.102.74.238:36868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7f6e19-8421-09b6-e0ab-0000dc45f7bf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.210.214.48:9814/i","pattern":"[url:value = 'http://178.210.214.48:9814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa55ad-3f1a-3b9c-b2f2-0000d41968fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.43.17.123:8083/sshd","pattern":"[url:value = 'http://185.43.17.123:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c1b7d9-2359-5b10-84ae-000031c981b8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.60.216.19:65020/i","pattern":"[url:value = 'http://179.60.216.19:65020/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fff2597-3346-4270-1b10-0000c9dbd4ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.60.246.15:16794/i","pattern":"[url:value = 'http://181.60.246.15:16794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e674ff66-929b-c629-81e7-00007c60ba8d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.57.122.121/mig","pattern":"[url:value = 'http://2.57.122.121/mig']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d8058e-4a5f-44ba-9d59-0000eaa2ddc5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/ns3.jpg","pattern":"[url:value = 'http://162.215.218.82/ns3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2792de92-8d4d-b7ee-8d97-00000b5b33ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.229.20.42:2874/i","pattern":"[url:value = 'http://43.229.20.42:2874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8874502-76a7-47e8-fa24-000009203ccb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.160.116.52:57196/i","pattern":"[url:value = 'http://182.160.116.52:57196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc2bddb2-abe5-73fc-1186-0000aa862d0e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.182.77.20:86/tftp","pattern":"[url:value = 'http://93.182.77.20:86/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1886ff-5a2e-c3a1-32c8-0000345bd673","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.136.63.232:92/tftp","pattern":"[url:value = 'http://2.136.63.232:92/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50aaf8d7-7b99-02db-cc27-000096d64708","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://61.244.254.110:37903/tftp","pattern":"[url:value = 'http://61.244.254.110:37903/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a46d839-f4fd-9bad-4eca-000009923019","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.63.168.2:8082/tftp","pattern":"[url:value = 'http://179.63.168.2:8082/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db72d22-f06c-572d-23a5-0000ba90abdd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.226.241.197:5003/tftp","pattern":"[url:value = 'http://77.226.241.197:5003/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b2125e-65f9-4191-8787-0000cfcfe446","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://188.243.36.33:8082/sshd","pattern":"[url:value = 'http://188.243.36.33:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a807d3e3-a43c-ec3f-b382-00006ba32880","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/oto","pattern":"[url:value = 'http://162.215.218.82/oto']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1cf29d-5037-e4fb-ea6e-00003336b193","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://213.47.243.57:48784/i","pattern":"[url:value = 'http://213.47.243.57:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613fa6b1-166a-f818-d16c-00007ed1e7ba","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://139.162.53.175:685/Mozi.m","pattern":"[url:value = 'http://139.162.53.175:685/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef77204a-3779-e53c-9cf1-0000d29e8d6a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.110.37.104:48784/i","pattern":"[url:value = 'http://80.110.37.104:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f63296-f71b-44f8-0a6a-0000b44682cd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/debug.dbg","pattern":"[url:value = 'http://160.187.146.122/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab0d13a-10d2-05db-021c-00008ec862a0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://37.252.69.10:58829/i","pattern":"[url:value = 'http://37.252.69.10:58829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943584c7-05f9-7329-2f72-000069ca5c93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.57.30.25:7580/sshd","pattern":"[url:value = 'http://85.57.30.25:7580/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef77aa0-32e0-fd37-ef44-0000db07eee3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://78.36.11.185:1080/sshd","pattern":"[url:value = 'http://78.36.11.185:1080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c505a4b-788b-cc91-a4d1-0000a386c3f9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.25:65481/i","pattern":"[url:value = 'http://114.31.8.25:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574af2ee-72e0-98e7-a36e-0000e78993e2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://115.127.68.162:55090/i","pattern":"[url:value = 'http://115.127.68.162:55090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83465252-77c5-a8de-5c68-00008c7c6480","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.201:26818/i","pattern":"[url:value = 'http://202.40.178.201:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d2efa6-c858-0c83-9ec5-000098b83844","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.226:26818/i","pattern":"[url:value = 'http://202.40.178.226:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb23183-69a4-1d64-3a9b-0000f437358a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.sh4","pattern":"[url:value = 'http://160.187.146.122/where/botx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528a5516-00bf-7812-9b24-0000267c5911","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff93a9f3-4ad0-ccf2-eff3-000055374d86","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mpsl","pattern":"[url:value = 'http://160.187.146.122/where/botx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066d5bec-041b-b139-0268-00003ec2f516","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.m68k","pattern":"[url:value = 'http://160.187.146.122/where/botx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a416f3a-1948-4847-e6e7-00003e3423cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mips","pattern":"[url:value = 'http://160.187.146.122/where/botx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703714aa-b276-87fe-e341-0000b68aef32","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm5","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a8e9df-bf0e-3dfd-89bf-00002512547a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/wget.sh","pattern":"[url:value = 'http://160.187.146.122/where/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7df99e-0953-4935-88b3-0000e83187ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8201/sshd","pattern":"[url:value = 'http://81.22.42.232:8201/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b0132f-63de-e767-47bd-00006de9b608","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.107/sshd","pattern":"[url:value = 'http://121.202.208.107/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e548ee-4be9-378a-4542-0000bfca6be7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8013/sshd","pattern":"[url:value = 'http://201.94.181.7:8013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928d95d-cf51-2a2c-b1fb-0000f55d2ea8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8016/sshd","pattern":"[url:value = 'http://201.94.181.7:8016/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e07856-0808-e40f-7b1d-0000dbab062e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8014/sshd","pattern":"[url:value = 'http://201.94.181.7:8014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3a43d-7e1b-d5e6-e89a-00000d74c9db","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.209.31/sshd","pattern":"[url:value = 'http://121.202.209.31/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad70e51-8f0f-d3cb-4e78-00001f3c6b0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.237/sshd","pattern":"[url:value = 'http://121.202.208.237/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae98b30-138a-4ac2-6211-0000d1bcbb28","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8202/sshd","pattern":"[url:value = 'http://81.22.42.232:8202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba0c0c97-0835-ba60-8b3b-0000a929e846","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/sora.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f2fe88-8ce4-aa9c-c616-0000c2dc50d6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6203841-e870-3775-9ed4-0000a9df3e9c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mips","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d34b265-687b-3b44-d1e7-00004d2d7477","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/sora.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555e34a7-6e00-48ae-7aa1-00001fb8811a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555f126b-80d6-27e0-3791-000033d45d8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c57b20d-51a4-b984-6cec-0000df52debc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/w.sh","pattern":"[url:value = 'http://160.187.146.122/bins/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f32c72c5-18c7-6574-a84b-00004cc36661","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/c.sh","pattern":"[url:value = 'http://160.187.146.122/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--410b8fec-c308-457f-4ac2-00007f473127","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mpsl","pattern":"[url:value = 'http://160.187.146.122/where/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c843ef1-9560-0c17-01e0-0000eb600071","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/sh4","pattern":"[url:value = 'http://160.187.146.122/where/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d94925-e984-27d9-0870-000014445f6d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mips","pattern":"[url:value = 'http://160.187.146.122/where/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d6dca6-98b7-a2b0-c276-00006bbe9987","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/ppc","pattern":"[url:value = 'http://160.187.146.122/where/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2464ed68-950d-b331-021c-000013bdf7f2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86","pattern":"[url:value = 'http://160.187.146.122/where/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaf32b5-5890-c396-773f-00009cfa9393","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm5","pattern":"[url:value = 'http://160.187.146.122/where/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f57df3-43fe-6df3-6a91-000014b289b7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/m68k","pattern":"[url:value = 'http://160.187.146.122/where/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702d9a17-df2f-1e98-bed2-0000236ecece","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a0f26e-8228-54aa-5c3c-000046638310","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.sh4","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d87ad7ea-29c2-f6f3-9bef-00002eaadbfa","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f21039-5991-5a89-05de-0000c6bd1ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b4ae60-11fe-6ac4-993c-000040296848","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.spc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c26703-6cf2-0d95-37cc-0000a9e6a5dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86_64","pattern":"[url:value = 'http://160.187.146.122/where/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a15399-e32c-61e8-163c-000036f35b18","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm7","pattern":"[url:value = 'http://160.187.146.122/where/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae2098ac-0cf3-3b31-bf9d-0000a6e2c1de","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac1e462-2ac4-d4dc-104a-000069549e54","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f38e5141-854c-23c4-8631-00002c8e6098","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm7","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218425f5-7008-fdcc-5844-0000455f636a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92248d34-c204-de40-cd9b-0000653a0aa7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2664198-ad10-cd72-5163-00004ac5163d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.spc","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848961d7-bbb4-0ca1-deb5-0000943207fd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d80306d-c34b-08c8-4b9f-00008687a813","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bda7f2b-6ca8-5a55-4a80-00000ecfb237","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd92ce0f-91a1-642a-7b0f-0000b4520ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a7903-a888-2663-d0ff-00009ec491fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6ca4c4f-b814-1f39-96a4-0000a8cda452","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.50.222.238:51680/i","pattern":"[url:value = 'http://77.50.222.238:51680/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664efe84-4681-7bfa-0c52-000009115630","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.239.98:802/sshd","pattern":"[url:value = 'http://2.54.239.98:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e707999-887e-80a2-adec-0000a84c755c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.204.105.97:30802/i","pattern":"[url:value = 'http://85.204.105.97:30802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90bd54ad-c69b-3f2a-8e5b-00004ed1dc6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://87.119.108.21:40462/i","pattern":"[url:value = 'http://87.119.108.21:40462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b735449a-6b9f-a755-7186-0000c654361d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://183.91.77.253:19833/i","pattern":"[url:value = 'http://183.91.77.253:19833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6384224e-2ebe-2789-6dc5-0000c315e41e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.98.176.195:8022/sshd","pattern":"[url:value = 'http://201.98.176.195:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0004dad-aec3-2138-ba2d-00006001ba35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.84.143:802/sshd","pattern":"[url:value = 'http://2.54.84.143:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb914ea-8065-d140-2690-0000cc10ccce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.193/sshd","pattern":"[url:value = 'http://121.202.208.193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2e7183-acb1-f6e8-fabf-0000fdf7a502","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14-0-204-188.static.pccw-hkt.com/sshd","pattern":"[url:value = 'http://14-0-204-188.static.pccw-hkt.com/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450906ac-2fbe-1e0c-8dbd-00000b92fecd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://223.83.211.82:8000/sshd","pattern":"[url:value = 'http://223.83.211.82:8000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10808ec3-72ac-aff4-ccd4-00002f275b42","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.26.97.59/sshd","pattern":"[url:value = 'http://195.26.97.59/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3938239b-fd93-0a34-37c3-0000939bdd79","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://202.88.234.44:64615/i","pattern":"[url:value = 'http://202.88.234.44:64615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf40096a-2d1f-e250-cb4f-00001628f13e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://93.116.56.78:3976/i","pattern":"[url:value = 'http://93.116.56.78:3976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ef2705-49c0-4181-85f2-000018cdca0c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://31.28.31.6:50871/i","pattern":"[url:value = 'http://31.28.31.6:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b04175-76ff-cf46-e5fa-0000844f22ca","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://191.33.171.242:55443/i","pattern":"[url:value = 'http://191.33.171.242:55443/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c279b0d-abe6-fe12-d5f1-0000cb11303b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff13f38-74de-f2f0-f2cc-00004c6a193f","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7899769-9fcc-35f7-7a45-0000191492bf","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc85eccc-7df7-ed04-7282-000003dae119","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28665217-5386-08d4-e2e8-0000c1430bc8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b01688e-4741-74ba-38bc-0000c5fea246","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac15f6ae-a455-5040-af0a-000008ab97b8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b37a6c9-1574-fd75-bb51-00002ae8561a","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://47.96.106.127:8890/02.08.2022.exe","pattern":"[url:value = 'http://47.96.106.127:8890/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef6e4a4-808a-09e2-881e-000044cbd1fd","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:83/sshd","pattern":"[url:value = 'http://90.8.83.87:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976e93b9-a2c7-e84b-c926-0000ce9f1520","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87/sshd","pattern":"[url:value = 'http://90.8.83.87/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f8459-f510-7825-2a34-0000a8448353","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://85.57.30.25:7480/sshd","pattern":"[url:value = 'http://85.57.30.25:7480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633e45af-4775-8539-719c-00006a3df97b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:81/sshd","pattern":"[url:value = 'http://90.8.83.87:81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b882f4-fdde-bb76-4846-00008ab45f87","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.142.68/sshd","pattern":"[url:value = 'http://121.202.142.68/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabc1d44-038d-f6a6-2deb-0000be5ef3f3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.153.132/sshd","pattern":"[url:value = 'http://121.202.153.132/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe92ed87-06fb-3b71-cd52-0000e5dd379c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.141:2000/sshd","pattern":"[url:value = 'http://61.2.45.141:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ee5976-b173-5372-bf71-000088c1783e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.172:2000/sshd","pattern":"[url:value = 'http://61.2.45.172:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51175c9f-e64e-ff6c-6d8e-000097e42dad","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.247.2.226:48894/i","pattern":"[url:value = 'http://177.247.2.226:48894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52beabcd-5933-1aae-c0e5-00000c2bbb46","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.236.116.198:23704/i","pattern":"[url:value = 'http://45.236.116.198:23704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26364721-3bb4-963a-fabc-0000bd7b2504","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://24.37.71.230:54401/i","pattern":"[url:value = 'http://24.37.71.230:54401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f72898-ebff-8e33-cf12-000079f265f7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://88.24.52.121:10062/sshd","pattern":"[url:value = 'http://88.24.52.121:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b47b19f7-7b07-6525-646a-0000182a21e3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://91.147.91.21:23459/i","pattern":"[url:value = 'http://91.147.91.21:23459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6625d862-c9ba-18f8-01e1-0000bdc0c1d6","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.196.93/sshd","pattern":"[url:value = 'http://121.202.196.93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e909afa-3c58-31ba-38a4-0000378442f2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://130.61.147.74/bot.zip","pattern":"[url:value = 'http://130.61.147.74/bot.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb15f2db-def7-937b-81af-00003efdf860","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://34.70.102.215/linpeas.sh","pattern":"[url:value = 'http://34.70.102.215/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d466cd-e423-5eb0-1b3b-0000df189ae9","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: https://1h.vuregyy1.ru/4pi3llms81.hta","pattern":"[url:value = 'https://1h.vuregyy1.ru/4pi3llms81.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eaf837a-1cee-5c4f-c0da-0000fbd7ddf7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://95.43.76.100:43118/.i","pattern":"[url:value = 'http://95.43.76.100:43118/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1b90535-0f92-cead-2733-0000191c9d09","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://2.55.126.179:802/sshd","pattern":"[url:value = 'http://2.55.126.179:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0bf015-6a0e-aaf2-2685-00006df51c0e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.93.200.20:2260/i","pattern":"[url:value = 'http://103.93.200.20:2260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbde383-bac1-903c-48ea-0000d7868f22","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://181.129.100.123:30581/i","pattern":"[url:value = 'http://181.129.100.123:30581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee9e4a4-6871-dfbb-e4ab-0000c9c3dc18","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://183.81.156.125:12929/i","pattern":"[url:value = 'http://183.81.156.125:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b694493-281b-aee8-327f-0000ab581081","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.115.254.91:32515/i","pattern":"[url:value = 'http://45.115.254.91:32515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e60be9e-8ea7-7466-bab3-0000340f3254","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37782/sshd","pattern":"[url:value = 'http://36.154.188.50:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a81f95-3271-b456-789f-00001af91ad2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37780/sshd","pattern":"[url:value = 'http://36.154.188.50:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8f0477-a00f-1179-b1aa-0000bca360d2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://188.95.148.167:9393/sshd","pattern":"[url:value = 'http://188.95.148.167:9393/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e708a0-b527-6c21-5936-0000dbb9e5af","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.48.13.117:21861/i","pattern":"[url:value = 'http://178.48.13.117:21861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4778ec3-cb1a-2fd2-1d58-00000cfe3c59","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.112.126.123:1600/i","pattern":"[url:value = 'http://45.112.126.123:1600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f57b8ba-97db-05ab-6059-0000e5acde80","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.220.234.5:53133/i","pattern":"[url:value = 'http://178.220.234.5:53133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a750e95f-cfc7-79a9-e959-0000774135d5","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f605a9e1-cf8a-7b70-61ad-000053f90ce0","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Photo.lnk","pattern":"[url:value = 'http://103.8.164.18/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83385531-1a84-e284-6026-00003e11db05","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Video.lnk","pattern":"[url:value = 'http://103.8.164.18/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d9b86-43da-8abe-6893-0000c6a42d10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.246.178.42:62425/i","pattern":"[url:value = 'http://188.246.178.42:62425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63752de4-8ec8-ffc7-d3bb-00005ad8e2ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.lnk","pattern":"[url:value = 'http://80.147.155.189/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1648d134-e905-1605-2f8f-000037303508","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.lnk","pattern":"[url:value = 'http://80.147.155.189/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a6a7d-452c-77b3-fcf2-0000879da53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/Install/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/Install/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c88cd-4ff6-a259-970f-0000b1342e9c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/RelFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/RelFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c825e47-9a1e-c40c-90c1-0000a62d4c51","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/ExeFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/ExeFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53044cf-8205-cd60-eed7-0000dc492e8b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/GdbFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/GdbFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2f2b1a-52d5-0011-5544-00003866a357","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.25.123.70:8080/sshd","pattern":"[url:value = 'http://109.25.123.70:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a528a2f5-501f-50a2-9d2b-0000eefd82a1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.234.234.14:16507/i","pattern":"[url:value = 'http://45.234.234.14:16507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e5ae0b-8633-d03b-7c3b-000018c72d28","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/i","pattern":"[url:value = 'http://50.43.160.231:38064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d286872-33f8-40c9-9805-00003b92b0a8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.173.101.114:10000/swt","pattern":"[url:value = 'http://107.173.101.114:10000/swt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8053aa22-1fa5-7a59-a702-00006935838d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.90.122.2:36364/i","pattern":"[url:value = 'http://116.90.122.2:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60418e02-e1c0-b948-c022-000053295563","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/2","pattern":"[url:value = 'http://178.16.54.109/2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5289c0-e568-23a0-9f08-00000afdc098","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/i","pattern":"[url:value = 'http://36.64.227.134:63289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2819ed06-ab14-bbd1-72f1-00007f401c55","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://117.72.242.9:9999/02.08.2022.exe","pattern":"[url:value = 'http://117.72.242.9:9999/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df80180-a164-a725-52f1-0000bf3e151c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.lnk","pattern":"[url:value = 'http://80.147.155.189/AV.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ca1f24-1c86-00ea-cac4-00007dd98e07","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.scr","pattern":"[url:value = 'http://80.147.155.189/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f7e3f4-ce09-34df-25f6-0000103159e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.scr","pattern":"[url:value = 'http://80.147.155.189/Video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b473340-12e7-f789-b81f-0000983f79f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.scr","pattern":"[url:value = 'http://80.147.155.189/AV.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1115c62d-c86f-df03-4537-0000349e042f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.77.244.174:8602/info.zip","pattern":"[url:value = 'http://220.77.244.174:8602/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e72eef-fbb9-9d66-7647-000063a1ace7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8b07df-4f19-25e6-956d-00004788fb41","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445c0f5f-c1ff-1743-bfdc-000076d32d77","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--304ebef7-6f58-ae3f-249c-0000afdfcf6a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c676cfea-2e3a-b1cb-7361-0000a5070f96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb706cec-febe-e17d-0f5e-0000cdc33916","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdbcea3e-33af-b2e6-2c3c-0000bcc56948","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3594e545-6b13-eb23-ccd9-0000564c5a44","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e01e3f4-a4c9-acfa-014b-000044ef0e35","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951953c5-1cd6-0858-17de-000096efb7c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c59f133-9de1-8459-43df-0000cd4b2747","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c52e5aa4-56a6-83b7-cab3-0000b68508c6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3305c435-2ca2-e218-9823-0000092a8423","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5a7bce-d701-8ef2-2405-00002832e67f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47dd59-ee08-6bb9-4024-00004b353f5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f28f311-146e-336c-9493-0000e3b69652","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e0178f-fea3-26a2-397b-0000bb967fe5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ced049-7333-0a66-052d-000076d9d96b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01568980-53b5-039d-2d89-00007d0a89ec","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0236ca9-086d-ddaa-9578-000049f07658","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4398af10-4db2-6df5-f268-00003f1b5dcd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b748df-b46e-f466-148c-00001f06d487","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08c0192-2405-dfdc-5619-0000f7f4d7da","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c3db1d-5122-fdf4-18bc-00008029fa30","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbbba91-db34-7089-892d-00004a3ebb14","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9280769e-09ac-bdd3-82eb-000097268d96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef961f9-8744-50f6-fcfe-0000f6e41db1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1750929d-c8a5-5f0d-baf5-000029a1d776","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6b5e92-a52f-b856-d388-0000f4b9e1f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c47e9-3fb1-a997-6083-0000a9795a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.208.202.85:9914/i","pattern":"[url:value = 'http://103.208.202.85:9914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f4b818f-0734-ba7c-3a69-0000dd89287e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://39.105.200.188/02.08.2022.exe","pattern":"[url:value = 'http://39.105.200.188/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c70381-8b04-c407-bcfd-00003aac303e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15bc65cf-6da5-0ca4-4007-0000b4d8f483","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc43167-84d1-c3a6-d360-0000e3ba991c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f626dd-cd38-6746-0f6c-0000e62737b5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30dab3f-38a2-67e7-b24a-0000e803fe3f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.lnk","pattern":"[url:value = 'http://68.110.47.231/av.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ef6741-36ff-0204-65b5-00009f27a030","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0206c5-9e83-dbdb-af8c-0000db46d704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3ea491-e9e2-9981-079c-000003adf3e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.lnk","pattern":"[url:value = 'http://68.110.47.231/photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8035841-3891-39aa-69bd-00006e452407","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.lnk","pattern":"[url:value = 'http://68.110.47.231/video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f820f8-136b-c16c-509a-000069433963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4583570-69be-a646-7132-00006706364a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96fb2f47-fcb4-7244-6f8a-0000b9d0cd84","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebc6a81-b86a-d13b-3d68-0000494448ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.scr","pattern":"[url:value = 'http://68.110.47.231/video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b299ff-1474-34c1-8c7f-0000cf0292d5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.scr","pattern":"[url:value = 'http://68.110.47.231/av.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b819651-079e-e1f9-aef0-000024ac9f08","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.scr","pattern":"[url:value = 'http://68.110.47.231/photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b6eacb-7cfc-2b47-6707-0000ef1f31c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/info.zip","pattern":"[url:value = 'http://68.110.47.231/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2526ca12-91e7-1046-c723-000008cc88ac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.154.90.21:4747/i","pattern":"[url:value = 'http://103.154.90.21:4747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf137d-1f59-2d0e-4259-0000c26b20d6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.190.74.159/sshd","pattern":"[url:value = 'http://88.190.74.159/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4144fab-dcb5-f401-0593-00004c60707c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.66.224.73:8080/sshd","pattern":"[url:value = 'http://82.66.224.73:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69780bcd-a69e-9f68-9976-0000d02b6011","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/i","pattern":"[url:value = 'http://138.219.58.34:28990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54527f32-440f-52ed-fb11-0000fe5b21e5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.219.38.228:23053/i","pattern":"[url:value = 'http://178.219.38.228:23053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31ea338-8254-732e-fcea-0000a12b236c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://86.89.95.77:8999/sshd","pattern":"[url:value = 'http://86.89.95.77:8999/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2504f598-31f6-28e3-0a7f-000069d07d22","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d14ff0-f971-9dba-6a2e-0000c7878705","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://93.39.215.44:9111/sshd","pattern":"[url:value = 'http://93.39.215.44:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceba9d76-10b3-3165-27ec-00004b51ff47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://129.0.120.134:9999/i","pattern":"[url:value = 'http://129.0.120.134:9999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb95120f-79b5-8326-abf7-000007bb1540","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.189.6.236/curl","pattern":"[url:value = 'http://107.189.6.236/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4bc18b-02fe-78d1-dbdd-00002af9cf74","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://2.55.81.169:802/sshd","pattern":"[url:value = 'http://2.55.81.169:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfe021c-ec60-4242-b9fb-00008979a27f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://85.187.54.142:10032/sshd","pattern":"[url:value = 'http://85.187.54.142:10032/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f5b049-15fb-cd09-85bb-0000a22f5bbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/i","pattern":"[url:value = 'http://41.162.188.251:22850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07812323-b13e-134c-9c31-0000ea6b79c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://66.39.79.68/","pattern":"[url:value = 'http://66.39.79.68/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9d6525-7427-6067-512d-00005cc4b141","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://3.141.75.29/","pattern":"[url:value = 'https://3.141.75.29/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcbb965-77e3-fcdd-dab6-000083db42b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://13.113.8.105/","pattern":"[url:value = 'https://13.113.8.105/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24215dc5-9a7a-0d77-6d8f-0000206e2266","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://18.217.254.255/","pattern":"[url:value = 'https://18.217.254.255/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b6dc1c-60f0-7b6b-d14d-0000eec58332","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.134.8.43:93/sshd","pattern":"[url:value = 'http://188.134.8.43:93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25368e03-91bc-ea7f-3b77-00009c8adb8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.42.177.12:3389/i","pattern":"[url:value = 'http://94.42.177.12:3389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b744ff-5b0b-2ae7-7c77-00008bfeddad","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://scrroeder.com/1q1q.js","pattern":"[url:value = 'https://scrroeder.com/1q1q.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d6166-94ec-1625-b6e2-0000f7c9b5f9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.255.210.242:45640/i","pattern":"[url:value = 'http://37.255.210.242:45640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2dbb3b-f7b0-14c6-539f-00009ea664f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.127.68.162:55090/","pattern":"[url:value = 'http://115.127.68.162:55090/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7ef27d-58bd-52c9-9ccb-0000396861f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.160.116.52:57196/","pattern":"[url:value = 'http://182.160.116.52:57196/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d7dd86-ea83-fc82-a325-00003defde8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN32.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN32.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3023826f-0f6a-39e9-a74d-00001c2f4238","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11684f3-544b-cf52-54e3-0000e8cf60e8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namuxp.zip","pattern":"[url:value = 'https://www.namuvpn.com/install/namuxp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61bd262-1c77-03ba-ddc2-0000864e3467","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://46.151.56.42:28186/","pattern":"[url:value = 'http://46.151.56.42:28186/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94937ca-faff-5655-5d23-0000f7490fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namu864.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/namu864.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7a75cd-64f5-ce83-d3ed-00008f995523","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.240.70.185:14868/","pattern":"[url:value = 'http://115.240.70.185:14868/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cdb7dc-e0fc-8fc2-b274-00003eb40f2a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://122.170.110.131:9105/cryptography_module/base_library.zip","pattern":"[url:value = 'http://122.170.110.131:9105/cryptography_module/base_library.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a16802-45a8-6dab-7bba-0000fb07e392","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.12.78.161:36220/","pattern":"[url:value = 'http://185.12.78.161:36220/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01cecb3c-03b5-5d34-4b3e-00008dd5b869","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.244.113.217:53408/","pattern":"[url:value = 'http://94.244.113.217:53408/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582bfe06-ad9f-e20f-39c5-0000d6780c37","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.220.234.5:53133/","pattern":"[url:value = 'http://178.220.234.5:53133/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba24c3fa-c407-8704-4832-000090f1d34e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://81.16.249.96:46703/","pattern":"[url:value = 'http://81.16.249.96:46703/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e68681-6dff-05a8-cfee-000030314c69","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.20.138:24291/","pattern":"[url:value = 'http://202.148.20.138:24291/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0008fcce-f5b2-1c9e-9b36-0000d995d867","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.252.69.10:58829/","pattern":"[url:value = 'http://37.252.69.10:58829/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d234c40-d626-5334-b68f-00007a47b918","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/","pattern":"[url:value = 'http://87.119.108.21:40462/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb044475-f7fc-e581-6875-00003534a1f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://190.12.99.194:28516/","pattern":"[url:value = 'http://190.12.99.194:28516/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a343dc-5f1b-aae4-23b8-0000e46e671f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/","pattern":"[url:value = 'http://138.219.58.34:28990/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ce8ae5c-ad3a-1285-8096-00000f85691b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.75.193.34:9432/","pattern":"[url:value = 'http://217.75.193.34:9432/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ed4678-bd36-d759-5b1c-0000d60c0a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://212.107.232.167:21838/","pattern":"[url:value = 'http://212.107.232.167:21838/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1dfd23-e544-79df-204d-00000c694e21","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.155.92.203:3956/","pattern":"[url:value = 'http://216.155.92.203:3956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0de4e6-a609-3ae0-cc9f-00001dbaa387","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://83.218.189.21:5195/","pattern":"[url:value = 'http://83.218.189.21:5195/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e47c66c-1731-b3fe-1f27-0000c0a3d35f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.164.117.74:42924/","pattern":"[url:value = 'http://103.164.117.74:42924/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8418c75e-5143-616e-25c2-000005839f4f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.134:10702/","pattern":"[url:value = 'http://154.0.129.134:10702/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbeaeb04-c1b3-9618-a8dc-00000e2acce8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.140.32.219:12617/","pattern":"[url:value = 'http://78.140.32.219:12617/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57278d8c-e8a2-de20-c8ee-0000377ef470","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.178.100.190:4788/","pattern":"[url:value = 'http://115.178.100.190:4788/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7f01e7-cb32-69ed-7885-0000817adeeb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.131.234.26:51118/","pattern":"[url:value = 'http://202.131.234.26:51118/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3136cb6a-611e-fd6e-1959-000056829075","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.114.200.50:48416/","pattern":"[url:value = 'http://82.114.200.50:48416/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85768dff-0157-d263-374f-00007da543c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://186.138.107.5:14491/","pattern":"[url:value = 'http://186.138.107.5:14491/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af68559-3def-d07b-6a6d-000085316bfc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.84.212.18:20781/","pattern":"[url:value = 'http://154.84.212.18:20781/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709c94e2-de75-9830-6fc7-0000b284d161","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.114:10702/02.08.2022.exe","pattern":"[url:value = 'http://154.0.129.114:10702/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b0f07c1-9894-711e-5636-0000bbe532c4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://62.197.62.195:60001/sshd","pattern":"[url:value = 'http://62.197.62.195:60001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43055a89-d44a-d1cf-7dcc-00002aac24b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.95.137.155:1876/i","pattern":"[url:value = 'http://36.95.137.155:1876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d63bcf-9c86-f6fc-b17f-00003d870cf3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/.i","pattern":"[url:value = 'http://45.147.202.53:9635/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64350af1-fdfa-ec5a-6c5a-0000ec2c7084","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://102.23.89.5:8083/sshd","pattern":"[url:value = 'http://102.23.89.5:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee6607e-8f42-bb2b-5a5a-0000868d2cb0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/bin.sh","pattern":"[url:value = 'http://95.155.243.196:38537/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b874ce90-a3a4-9c05-b083-00000b74b203","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/i","pattern":"[url:value = 'http://95.155.243.196:38537/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883604e0-2acf-4c32-a78d-0000f642c51b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/i","pattern":"[url:value = 'http://45.147.202.53:9635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df7cce0f-d207-1b9e-a81c-0000f3e0c59b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/i","pattern":"[url:value = 'http://213.5.194.56:43416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e93035d0-f4c7-3e57-68c5-0000fd17826d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.62.202.150:10052/sshd","pattern":"[url:value = 'http://95.62.202.150:10052/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5d6720-662d-c126-4146-0000f35dd3dd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.40.178.238:53237/i","pattern":"[url:value = 'http://202.40.178.238:53237/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac6865-9ae0-3626-c44c-0000c82e4275","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://184.185.30.182:29029/.i","pattern":"[url:value = 'http://184.185.30.182:29029/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4c197f-471c-b35a-50f4-00004fb1ce8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.88.6.203:8907/.i","pattern":"[url:value = 'http://36.88.6.203:8907/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5622e337-3340-f63e-e035-000075615726","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/.i","pattern":"[url:value = 'http://41.162.188.251:22850/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9348eec-3f9e-e492-9252-0000d03a2dd3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/.i","pattern":"[url:value = 'http://213.5.194.56:43416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58307433-303d-2442-c8a4-0000bfd19261","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://196.39.143.113:8080/sshd","pattern":"[url:value = 'http://196.39.143.113:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce71d395-cc1e-7174-e4ad-000082b9e80d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/.i","pattern":"[url:value = 'http://50.43.160.231:38064/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0abde195-8632-480e-3283-0000fd1b3223","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.135.26.83:32710/.i","pattern":"[url:value = 'http://88.135.26.83:32710/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce829b5-a46a-7b4a-f3e9-0000dd748c48","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/.i","pattern":"[url:value = 'http://138.219.58.34:28990/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16807076-405f-15e6-27d6-0000668dab8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/.i","pattern":"[url:value = 'http://45.173.12.30:17886/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151bc9aa-b0d2-1415-2681-0000b0c438e6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://24.37.71.230:54401/.i","pattern":"[url:value = 'http://24.37.71.230:54401/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf9179fe-0c74-b234-a3fc-000032d97aa6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://77.50.222.238:51680/.i","pattern":"[url:value = 'http://77.50.222.238:51680/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb09d5c-c4d7-f141-07a1-00009e5ed59f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.88.234.44:64615/.i","pattern":"[url:value = 'http://202.88.234.44:64615/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b416d8-3416-5050-c812-0000a778e31c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv5l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a82745a-8cb1-60e1-448a-0000ddb8b07c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv7l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd7aa72-a9e8-7005-7ad2-0000ef5cea5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/x86","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5399451b-c1f6-1ed1-8505-0000e0d899cc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv6l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09400318-21f5-4d95-ec09-0000bbb2a53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/mips","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61af2799-f4e1-00cb-c88a-00009a18caac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv4l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781a6a6a-23ef-2081-8585-0000d3467177","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://181.171.188.254:17418/.i","pattern":"[url:value = 'http://181.171.188.254:17418/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1a38db2-054c-65a0-2dbe-0000f35e7b75","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/.i","pattern":"[url:value = 'http://87.119.108.21:40462/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7589f785-b123-57a9-fb18-0000dc11d04e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://52.248.41.253:8443/02.08.2022.exe","pattern":"[url:value = 'https://52.248.41.253:8443/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e986518d-793b-d2ac-f679-0000bae08794","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/busybox-armv7l","pattern":"[url:value = 'http://156.246.93.156/busybox-armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cd78af-8fc4-a5a4-3ad9-000024611224","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.8.20.75:10002/sshd","pattern":"[url:value = 'http://88.8.20.75:10002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6d97a3-303a-b67d-6b63-0000224ba7a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/i","pattern":"[url:value = 'http://45.173.12.30:17886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e554c16-cc23-556e-f873-0000ab103f20","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.18.221:30944/i","pattern":"[url:value = 'http://202.148.18.221:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89159d06-31d7-be1e-7804-000059c92929","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.89.189.98:46828/i","pattern":"[url:value = 'http://80.89.189.98:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6a8a8-37dd-336a-3660-000037c41849","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.67.246.82:22072/i","pattern":"[url:value = 'http://36.67.246.82:22072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40918c38-0eac-f687-fe10-0000ce308553","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.6.196.230:27629/.i","pattern":"[url:value = 'http://213.6.196.230:27629/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348700a8-0d55-68ec-75cc-000050c15fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.93.200.20:2260/.i","pattern":"[url:value = 'http://103.93.200.20:2260/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb90a907-8157-e013-a232-00007ef3c734","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/.i","pattern":"[url:value = 'http://103.90.206.87:4419/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff581a65-f803-7f76-1d91-00006ff76f87","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.54.221.234:55031/.i","pattern":"[url:value = 'http://200.54.221.234:55031/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61adc761-194b-fb80-45f0-000091bf7a04","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.118.103.42:26816/.i","pattern":"[url:value = 'http://200.118.103.42:26816/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c29c7f8a-656b-5184-f484-000049ca616c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/.i","pattern":"[url:value = 'http://36.64.227.134:63289/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a337c623-8e5f-7cbe-8fb1-0000eb606873","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/i","pattern":"[url:value = 'http://103.90.206.87:4419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad357b-4e10-bb0d-126f-0000a684dfc6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8083/sshd","pattern":"[url:value = 'http://144.6.89.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a805c3-c33b-7125-e808-0000c2e5b20f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8084/sshd","pattern":"[url:value = 'http://144.6.89.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c2c9b-6e6b-9c02-5b09-0000136e05ca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://31.55.236.199:8080/","pattern":"[url:value = 'http://31.55.236.199:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0bf3dd-dac0-0d88-49df-0000d9648847","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://141.134.214.46/","pattern":"[url:value = 'http://141.134.214.46/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67cfe3f-8c91-41d1-7e72-000008cd1681","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.86.50.18:88/","pattern":"[url:value = 'http://116.86.50.18:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0691ff42-4212-585c-876a-0000934442a6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.3.138:88/","pattern":"[url:value = 'http://80.147.3.138:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348b28e-8f29-2e70-1e4d-0000b129769f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.246.34.66:8088/","pattern":"[url:value = 'http://220.246.34.66:8088/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec1914-0c28-dc7d-31c5-0000dde549cb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://174.71.238.196:81/","pattern":"[url:value = 'http://174.71.238.196:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36c5e96-1881-f1e9-4f5f-00006dd4dc86","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.167.179.75:88/","pattern":"[url:value = 'http://188.167.179.75:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783148f-2a9f-dd57-9f67-000044001c0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.93.58.234:82/","pattern":"[url:value = 'http://182.93.58.234:82/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef919d2-dab7-c12a-f027-0000251a474e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.165.183.55:83/","pattern":"[url:value = 'http://213.165.183.55:83/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d359599c-a60e-f850-4bd8-000079b10ba4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://108.41.80.142:84/","pattern":"[url:value = 'http://108.41.80.142:84/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db84825-f946-0c27-df77-000037ea3f0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.44.199.50/","pattern":"[url:value = 'http://78.44.199.50/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d0cc06-1e0c-c599-070e-0000116773bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.167.133.17/","pattern":"[url:value = 'http://109.167.133.17/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8650eb-03e7-7249-0479-0000efa10102","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.175.181.210:81/","pattern":"[url:value = 'http://202.175.181.210:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9474e5d-c8e2-48df-83bb-000016504e4c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://121.101.79.178:88/","pattern":"[url:value = 'http://121.101.79.178:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48303aad-677a-5720-1afb-000026a66500","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://92.43.24.71/","pattern":"[url:value = 'http://92.43.24.71/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc34396e-7157-d843-285a-0000990fda47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://193.165.245.46:8000/","pattern":"[url:value = 'http://193.165.245.46:8000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58130e20-9e96-a9bd-ab3f-0000d6066f46","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://218.103.122.102:50956/","pattern":"[url:value = 'http://218.103.122.102:50956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b03a58-ffeb-7d94-d801-000078115704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://124.36.156.140:8080/","pattern":"[url:value = 'http://124.36.156.140:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cff67c-8d6c-094a-93e8-0000e0a04d54","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.180.227.121:81/","pattern":"[url:value = 'http://90.180.227.121:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850afd1c-bbeb-5d17-ee91-0000a08d69d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://159.196.16.186:88/","pattern":"[url:value = 'http://159.196.16.186:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9db4f60-113b-b0d2-e367-0000da41d6d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.138.104.129:4000/","pattern":"[url:value = 'http://87.138.104.129:4000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d33667-c652-8939-affb-00002f288a18","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.60.107.150:8080/","pattern":"[url:value = 'http://185.60.107.150:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea1ef1d2-f5e9-38ba-ea48-00008dd34985","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.118.128.34:30117/i","pattern":"[url:value = 'http://185.118.128.34:30117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287dceca-6a66-67a0-b8e5-00001383a151","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://47.152.112.236:8105/sshd","pattern":"[url:value = 'http://47.152.112.236:8105/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dd7df02-7b9e-a301-dbdf-0000e9e50f0a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.86.246.233:38185/sshd","pattern":"[url:value = 'http://88.86.246.233:38185/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb72f670-791b-1120-f2c8-00005c6a7b2e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/pg.sh","pattern":"[url:value = 'http://78.153.140.16/pg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445a2d1f-3f60-973d-0f59-0000489843a2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.122.211.138:31644/02.08.2022.exe","pattern":"[url:value = 'http://200.122.211.138:31644/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e7aac-47de-b217-0d93-0000167c5d00","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/for","pattern":"[url:value = 'http://78.153.140.16/for']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a75098b-e1e9-b0a0-4007-0000e8bb8faf","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/busybox","pattern":"[url:value = 'http://78.153.140.16/busybox']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4970a14-b323-edd0-d91d-00007bdda0bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/bin.sh","pattern":"[url:value = 'http://96.66.24.241:39432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a042a2-e19f-d305-723a-00003a134256","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/i","pattern":"[url:value = 'http://96.66.24.241:39432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b52d4b-47fe-c99d-2c30-000013983af3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.87.112.128:47907/i","pattern":"[url:value = 'http://213.87.112.128:47907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7f537d-7c97-2f20-9de1-0000f973dc3d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/i","pattern":"[url:value = 'http://217.208.164.149:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ae5d32-9682-f61b-08df-0000ede2d987","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/mt.sh","pattern":"[url:value = 'http://78.153.140.16/mt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348d6c93-3ea8-3060-656a-000051629805","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/curl-amd64","pattern":"[url:value = 'http://78.153.140.16/curl-amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b01bf7-8e6b-944b-e336-000026aa58de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/sc.sh","pattern":"[url:value = 'http://78.153.140.16/sc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c378fa78-a0a1-5572-2c54-00001e198cbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/xx.sh","pattern":"[url:value = 'http://78.153.140.16/xx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a311e626-c851-6a04-9666-0000aa220bc7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/ph.sh","pattern":"[url:value = 'http://78.153.140.16/ph.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2783abe3-2156-fc94-1102-000066909cc8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.224.208.161:48263/bin.sh","pattern":"[url:value = 'http://90.224.208.161:48263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4529c55b-7186-279f-a4dc-000060a03fdd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/bin.sh","pattern":"[url:value = 'http://217.208.164.149:45464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d99a05e-6feb-1b54-94bd-0000b580d130","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/3.exe","pattern":"[url:value = 'http://178.16.54.109/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a9a1bc-46ce-a56e-04b5-00002024d4b8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/armv5l","pattern":"[url:value = 'http://195.178.110.204/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9721d6b-3c0a-2802-8d19-0000f1931dca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips","pattern":"[url:value = 'http://195.178.110.204/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6247cd-5c92-f986-2e01-000071859977","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i486","pattern":"[url:value = 'http://195.178.110.204/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f858d7a9-5f3a-1a83-2e9b-00008916a9a7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mipsel","pattern":"[url:value = 'http://195.178.110.204/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfcb720b-9124-8002-22b5-0000e99caabc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sh4","pattern":"[url:value = 'http://195.178.110.204/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a4edc52-2733-b45c-3df4-000027a759de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sparc","pattern":"[url:value = 'http://195.178.110.204/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4157be1c-f1ce-dd4d-3a15-00006e03589a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/powerpc","pattern":"[url:value = 'http://195.178.110.204/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e29bd-f75d-e3f7-9753-0000f165cb10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/m68k","pattern":"[url:value = 'http://195.178.110.204/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da02dfa-0801-ad23-6680-0000bad94ad2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i586","pattern":"[url:value = 'http://195.178.110.204/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7e00f8-2393-dfbc-f91a-0000f81c3bf1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips64","pattern":"[url:value = 'http://195.178.110.204/mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978ef74c-cae6-096d-0215-0000dc0be8c0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/y","pattern":"[url:value = 'http://195.178.110.204/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775b1e52-b573-ef3a-a54b-0000b3b608a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/s","pattern":"[url:value = 'http://195.178.110.204/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e38bb67-d788-0ec0-079a-000096dd5778","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/u","pattern":"[url:value = 'http://195.178.110.204/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdae133-665b-847b-0771-0000f338e72b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://160.119.69.4/x","pattern":"[url:value = 'http://160.119.69.4/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af8a1c7-6b0f-bdfa-1d78-000064ec3287","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/k.php","pattern":"[url:value = 'http://45.95.147.178/k.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4d566d-80b9-84ab-f787-000050f5dafc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/x","pattern":"[url:value = 'http://45.95.147.178/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e953f3-f668-c126-762e-00000bb4dcfe","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.107.139.197/WSW0","pattern":"[url:value = 'http://216.107.139.197/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abb0fff-4e69-00ec-eaf2-000091c50702","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.155.8.56/WSW0","pattern":"[url:value = 'http://202.155.8.56/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7cbcb4-8b10-18da-773e-000027e2cf2b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm7","pattern":"[url:value = 'http://45.66.228.93/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1dc5ee-3716-1b8e-7d67-00008281f7c8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_mips64","pattern":"[url:value = 'http://45.66.228.93/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264b2150-756c-cfd2-da7b-0000f55be6c3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm64","pattern":"[url:value = 'http://45.66.228.93/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f764bff4-16b0-2c80-d651-00006f398963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://65.99.181.12:49304/bin.sh","pattern":"[url:value = 'http://65.99.181.12:49304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dfe611-145b-5133-2eb9-0000f7da1721","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.88.191.25:4472/i","pattern":"[url:value = 'http://88.88.191.25:4472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc16a5d-bf64-17d6-2060-0000e3638969","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.83.87.122/run.sh","pattern":"[url:value = 'http://103.83.87.122/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa660add-eec1-7329-fe1c-00002f19cfd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/white_notepad_rcdata.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/white_notepad_rcdata.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d080ec-2b82-5cdf-6d8c-0000e9de2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/34534.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/34534.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef3efe0-870d-d558-0fb3-0000a0c6d9a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/test.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/test.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--057c786f-cd66-a40d-6e68-000009a8075f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/EC_puller.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/EC_puller.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d46da1-8449-0275-a72e-00007d2171fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.36/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b926d0-e657-8e0b-7e05-0000089cf873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b44ebb-b47e-be18-23df-00009f8b4145","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c62796-106c-3cf1-076b-0000a52a546f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.245/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4e10ef-9426-0790-032b-00008d6eacc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/yl2g3svth10bgzd/file","pattern":"[url:value = 'https://www.mediafire.com/file/yl2g3svth10bgzd/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc02676d-559d-035f-6234-000070cb812d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.196.221/main_arm7","pattern":"[url:value = 'http://87.120.196.221/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7801392-1788-e144-06a4-000086b6eb25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update","pattern":"[url:value = 'https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943ab489-5c6e-0f3c-04ff-00005c37d73b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi","pattern":"[url:value = 'https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702b61ca-51f4-38e6-16da-0000b814f5ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi","pattern":"[url:value = 'http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be91e69-3601-2df6-1dc3-0000bee7d089","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.128/bins/c.sh","pattern":"[url:value = 'http://31.77.227.128/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f62a06-848a-7bdb-fac2-0000cb4ea22e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/dodu","pattern":"[url:value = 'http://213.177.179.11/dodu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03630d9-6b8d-3c02-d4ba-000066d2e89b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.5.60:34419/i","pattern":"[url:value = 'http://110.37.5.60:34419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91549e80-1ee2-7419-6e6e-000096876cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/i","pattern":"[url:value = 'http://125.43.35.24:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329a8b59-27e1-64ad-b4ae-00005fb66b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/bin.sh","pattern":"[url:value = 'http://95.155.201.65:38304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54ed1e-5f6c-67ed-6d38-00006518d395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/bin.sh","pattern":"[url:value = 'http://95.56.232.109:37061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4ca38-e257-67ca-3171-00003ea0a9e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://81.227.43.110:42887/bin.sh","pattern":"[url:value = 'http://81.227.43.110:42887/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ded292-4688-0d2c-ecd5-0000d884711e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.12.46:51362/i","pattern":"[url:value = 'http://182.119.12.46:51362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880a31bf-4d6d-37bb-5b01-00001cfc12a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.88.136.194:55285/i","pattern":"[url:value = 'http://36.88.136.194:55285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288cb3f6-f187-4412-70d2-00006ed97894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/i","pattern":"[url:value = 'http://110.39.231.36:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc1c637-97d8-a148-8a36-0000a49134be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:38213/bin.sh","pattern":"[url:value = 'http://110.36.1.200:38213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3fcfc4-6554-f387-07c7-000098d49d75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/bin.sh","pattern":"[url:value = 'http://223.108.82.26:47552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41328f86-6789-1328-b652-00006502f7d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://204.244.176.203:60318/i","pattern":"[url:value = 'http://204.244.176.203:60318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d373e04c-2471-1364-e380-00001a84e2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.236.63:53748/i","pattern":"[url:value = 'http://27.207.236.63:53748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf4f226-4c2c-7509-1139-000054ecca2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/i","pattern":"[url:value = 'http://223.108.82.26:47552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78e8006-f162-b279-228a-0000c1780f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.89.147:43414/i","pattern":"[url:value = 'http://115.50.89.147:43414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b8a97cf-6a1b-530e-071e-00005de8e20b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/i","pattern":"[url:value = 'http://95.56.232.109:37061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5a36d7-221c-4d8a-5efd-00007e124f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.222.47.36:58453/bin.sh","pattern":"[url:value = 'http://27.222.47.36:58453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f995119-ae26-d9a5-804a-0000cdf29a9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://68.65.100.46:46734/bin.sh","pattern":"[url:value = 'http://68.65.100.46:46734/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd168a7-9551-dd68-ad22-000074b10dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/i","pattern":"[url:value = 'http://42.177.186.117:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b210d28b-2447-d2cb-8c24-0000b7af0684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/i","pattern":"[url:value = 'http://125.44.212.22:49662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb2f98e-d1ef-58de-5c67-0000ffccfb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/bin.sh","pattern":"[url:value = 'http://123.170.100.105:42942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b5c09e7-8312-7aad-b450-0000ebc42566","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/i","pattern":"[url:value = 'http://59.58.42.82:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70a4e78-769d-0c93-7bf2-000020bbf764","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/i","pattern":"[url:value = 'http://112.109.219.147:35136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6704ad23-30fe-74fe-1f60-0000d2b9bbcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/i","pattern":"[url:value = 'http://182.116.9.201:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2c0784-add1-4134-65b6-00006fd30c8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.37:32825/i","pattern":"[url:value = 'http://42.230.157.37:32825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0daf83d9-c518-2f9a-c955-000020e93eed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/i","pattern":"[url:value = 'http://222.139.198.215:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473b733a-6d90-6ceb-9228-00006893e6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/bin.sh","pattern":"[url:value = 'http://42.232.226.240:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c8f72c-0e7b-8bc7-0ed5-00000b63c7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/i","pattern":"[url:value = 'http://42.228.252.188:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0fd93bc-996c-a415-242c-0000a1521542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.182.221:40037/i","pattern":"[url:value = 'http://123.14.182.221:40037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874095b0-21f1-8291-9d7c-00004bc284f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/bin.sh","pattern":"[url:value = 'http://78.26.18.38:48086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2902ca3c-a751-0d4a-6a61-0000061c079b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/i","pattern":"[url:value = 'http://42.55.138.49:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4ab16e-8f7a-2641-0256-0000dde894b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/i","pattern":"[url:value = 'http://39.90.145.143:54042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6bc2f-4f2a-3475-64e6-0000e0a7d2db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/i","pattern":"[url:value = 'http://27.207.139.137:59758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56a0326-d4e6-89ca-3c1c-00004efca4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:35406/bin.sh","pattern":"[url:value = 'http://119.179.214.25:35406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc169a74-90cb-b4fe-9671-0000d8f4521f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.152.37:45005/i","pattern":"[url:value = 'http://115.58.152.37:45005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f969f88-81e2-bb57-e330-0000f4e5af7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/bin.sh","pattern":"[url:value = 'http://27.215.126.192:55352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af811b5-fdaa-62f8-e475-0000d75c2061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/i","pattern":"[url:value = 'http://115.58.130.246:33076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8243fbd7-71ca-556d-c97f-0000642d4ec5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/bin.sh","pattern":"[url:value = 'http://182.116.9.201:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbffa45-539f-7689-025f-000037aaad53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/i","pattern":"[url:value = 'http://113.228.149.193:49576/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58ec7c2-6ba9-88b7-3883-0000e8e6e8db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/bin.sh","pattern":"[url:value = 'http://182.126.81.119:38169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc54e5d3-183d-cdc6-0109-000034b65c5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.239.253:57738/bin.sh","pattern":"[url:value = 'http://110.39.239.253:57738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586343cb-12aa-4658-77b9-000066631073","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.130.126:36331/i","pattern":"[url:value = 'http://119.183.130.126:36331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b674a0b8-74a2-10e6-17d7-0000c654e37c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.95.98.66:8012/linux","pattern":"[url:value = 'http://210.95.98.66:8012/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b197a64-c739-493f-fdf0-00000a131f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/i","pattern":"[url:value = 'http://110.37.84.212:34554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac752a07-e0f6-23e8-3942-0000be3d1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/bin.sh","pattern":"[url:value = 'http://42.55.138.49:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e23c-d8ab-5480-49cf-0000e7272af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.92.171:60432/bin.sh","pattern":"[url:value = 'http://42.231.92.171:60432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086299e2-86f7-72fa-d089-00005d2f704f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/i","pattern":"[url:value = 'http://78.26.18.38:48086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5732a0-fbf6-473e-7830-000035718803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/bin.sh","pattern":"[url:value = 'http://110.39.231.36:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f7c57b-8418-9a57-147a-00003986860c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/i","pattern":"[url:value = 'http://182.121.144.189:60356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b55b145-a93d-5e2e-2533-000064f8303c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/i","pattern":"[url:value = 'http://182.126.81.119:38169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cb8976-ba41-72fb-013e-000042fd6971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.252.36:36560/bin.sh","pattern":"[url:value = 'http://42.239.252.36:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1628a5bc-68e6-8abd-1a9a-0000def7a29a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/bin.sh","pattern":"[url:value = 'http://125.44.212.22:49662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9860d4-33f3-7f75-9eb1-0000e5dfa8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.154.251:35768/bin.sh","pattern":"[url:value = 'http://124.131.154.251:35768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8675a7-b3d2-cd92-3ad9-00007ed2a5c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/i","pattern":"[url:value = 'http://125.41.8.245:37624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e28ec61-e398-089b-1a86-00007a1df0fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/bin.sh","pattern":"[url:value = 'http://27.215.212.219:39234/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca99e15-22f9-26d8-b6c5-0000ae539841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/bin.sh","pattern":"[url:value = 'http://108.168.0.60:36003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9645ab99-897e-d408-d07b-00004df1167a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:35077/bin.sh","pattern":"[url:value = 'http://210.208.110.20:35077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3331af8c-09d4-dafc-52bf-000064180765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:41323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a155a8a-8d01-5b5d-0366-0000355d8a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/bin.sh","pattern":"[url:value = 'http://222.139.198.215:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72c471b-0e58-81f0-7327-000069e5bcf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/bin.sh","pattern":"[url:value = 'http://115.58.130.246:33076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee11c422-4797-45f9-b268-00000a99e576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.169.3:39736/bin.sh","pattern":"[url:value = 'http://42.87.169.3:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0236e05-d5fc-8781-aa85-0000aba4b0ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:51370/bin.sh","pattern":"[url:value = 'http://221.1.226.175:51370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d63e6f04-3f29-572c-22ab-0000d07b8767","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.90.244:47446/i","pattern":"[url:value = 'http://221.15.90.244:47446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d741f2-613a-d9c0-2016-0000b3e3dbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/i","pattern":"[url:value = 'http://89.189.181.54:34451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5307589-4bbe-3c3a-18e9-00006e03d81b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/bin.sh","pattern":"[url:value = 'http://175.175.215.229:57947/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa06f17-4359-63e0-879a-0000d9ac24e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.209.101.105:37817/i","pattern":"[url:value = 'http://221.209.101.105:37817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a0e3f6-2662-7529-499e-0000e6ba49ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.51.204.238:50663/bin.sh","pattern":"[url:value = 'http://58.51.204.238:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2351ca65-c475-6b01-f863-0000971312e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/i","pattern":"[url:value = 'http://115.61.120.117:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a228ea9a-5b6a-2fe3-1ceb-000095d6cbb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.31.157:39851/bin.sh","pattern":"[url:value = 'http://42.224.31.157:39851/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b653a00e-8443-1616-7963-0000a28dd4b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/i","pattern":"[url:value = 'http://182.113.205.38:37725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dc7e17-41e1-312b-5557-0000d3c63abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/bin.sh","pattern":"[url:value = 'http://110.36.80.162:46146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d1c874-88e6-4147-9d5f-000055793a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/bin.sh","pattern":"[url:value = 'http://182.121.141.220:34479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--122ee7c0-9141-706b-66f0-0000a830bb18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.108.27.91:45906/bin.sh","pattern":"[url:value = 'http://91.108.27.91:45906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c71d815e-b807-afa3-0499-0000d3ca8300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/i","pattern":"[url:value = 'http://42.225.228.107:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e5a8ee-582c-982c-bf88-0000e1b498ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.174.185:43822/bin.sh","pattern":"[url:value = 'http://219.154.174.185:43822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3842b541-eca0-59ea-237f-0000844ed820","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.203.254:46174/bin.sh","pattern":"[url:value = 'http://123.190.203.254:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c263d5e1-bd11-a07c-cc74-000074a2fe43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.54.177.157:60692/bin.sh","pattern":"[url:value = 'http://42.54.177.157:60692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd4fd15-3e1f-1bea-d6b1-0000ce37ad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/i","pattern":"[url:value = 'http://42.180.11.230:34276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7ef819-da32-bfc1-a016-00008c59eac1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/i","pattern":"[url:value = 'http://95.155.201.65:38304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03f6fa22-9ea4-cc37-d1e7-00007532893d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/i","pattern":"[url:value = 'http://27.215.212.219:39234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d415eb39-3b7b-490e-5942-00000f9b55a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/bin.sh","pattern":"[url:value = 'http://42.225.228.107:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc12c11-1746-743d-827e-00003cc015cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.107.63.26:8127/linux","pattern":"[url:value = 'http://47.107.63.26:8127/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea798a1-2204-c08c-0028-0000dde6440e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/i","pattern":"[url:value = 'http://27.215.126.192:55352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432cc46e-6418-8742-d94c-00002b71dd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.49.47:47425/i","pattern":"[url:value = 'http://219.157.49.47:47425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426708ec-99ee-dc3f-b6b4-00004f8112db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/i","pattern":"[url:value = 'http://182.121.141.220:34479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb08f0d-1d88-ec44-2875-00008bd4e12a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/i","pattern":"[url:value = 'http://175.0.62.242:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032703bc-ef87-2131-d479-0000b615a471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/i","pattern":"[url:value = 'http://42.232.226.240:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58217655-dd8e-da2d-51e7-0000ab0d6783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/i","pattern":"[url:value = 'http://110.36.80.162:46146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd309c4-18bf-fc43-e13d-0000acc84389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/i","pattern":"[url:value = 'http://175.175.215.229:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3526726d-6079-e390-223d-00007b7d8361","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/bin.sh","pattern":"[url:value = 'http://110.37.84.212:34554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18c27f7b-8ca4-ec19-53e6-0000711f04a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/bin.sh","pattern":"[url:value = 'http://175.0.62.242:40182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27f6de5-6980-e80e-1743-00004bb62e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/Mozi.a","pattern":"[url:value = 'http://183.23.139.207:35951/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801acb44-ef75-09d3-a293-0000568997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/bin.sh","pattern":"[url:value = 'http://115.57.199.157:51293/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8bde2f-e235-0224-f598-0000a2b6f6c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.245:54758/i","pattern":"[url:value = 'http://115.48.148.245:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9573221e-6d79-ca58-8267-00008c70ade7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/i","pattern":"[url:value = 'http://42.179.152.19:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f02b749-150c-0306-de7a-0000ceb7aaed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/bin.sh","pattern":"[url:value = 'http://124.131.53.180:42721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7c9aa8-0ae0-7176-bbd3-0000f100167f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.85.180.51:37572/bin.sh","pattern":"[url:value = 'http://42.85.180.51:37572/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84eabae9-1048-c1b8-8d66-00000cb0e351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/i","pattern":"[url:value = 'http://156.146.24.110:51345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612b68af-2009-6636-a445-000027ca477d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/i","pattern":"[url:value = 'http://167.250.158.32:40802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e2328c-cb76-1481-2c98-0000bf2d70ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/gots","pattern":"[url:value = 'http://213.177.179.11/gots']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bcd508-5639-7855-137f-0000c4fdda5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.93.190:47055/i","pattern":"[url:value = 'http://123.14.93.190:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79002155-dfdc-770d-149f-0000129ebc6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/bin.sh","pattern":"[url:value = 'http://125.43.35.24:55742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace6723c-a3ca-a936-1e60-00008d6705cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:45429/bin.sh","pattern":"[url:value = 'http://27.204.233.111:45429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62c1752d-15d1-2156-5439-00007ac8efea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/bin.sh","pattern":"[url:value = 'http://39.90.145.143:54042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cabaf6-e3dc-e10d-3cb4-000020a42758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/bin.sh","pattern":"[url:value = 'http://182.121.144.189:60356/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9370e9c6-b0c0-27ed-a059-0000beed9656","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/i","pattern":"[url:value = 'http://210.208.111.220:51409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e902618b-8008-7a77-6c58-00008bfe8aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/i","pattern":"[url:value = 'http://124.131.53.180:42721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096cdd7b-21ba-8ff2-8b1d-0000dc405437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.223.220:38837/i","pattern":"[url:value = 'http://180.252.223.220:38837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c5f737-a84b-a2fc-803f-000065a1f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.129.253:43457/bin.sh","pattern":"[url:value = 'http://123.148.129.253:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7493333f-cbdc-0285-3874-0000462c40b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://8.138.19.119:9777/linux","pattern":"[url:value = 'http://8.138.19.119:9777/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb11c1b-def8-d616-5033-0000be14d783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/i","pattern":"[url:value = 'http://117.26.226.42:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55299827-94a1-3408-311d-0000325e8de0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/bin.sh","pattern":"[url:value = 'http://210.208.111.220:51409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faaf24fd-0a44-cf41-8aab-0000feebfa08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://gray-dyane-31.tiiny.site/index.json","pattern":"[url:value = 'https://gray-dyane-31.tiiny.site/index.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf6e07d-d540-1f8a-2384-0000a2ff1ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.83.31.27/main/pure.bat","pattern":"[url:value = 'http://45.83.31.27/main/pure.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51886f31-0a3f-d172-c26f-0000d0d9b622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/pwcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/pwcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ffe0a0d-b3c2-45e6-da58-00005c44e133","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/img_043214.png","pattern":"[url:value = 'http://178.16.53.176/HTTP/img_043214.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc5215a-e0bd-6172-d553-0000f2cccd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/crypted1.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338ada5b-aabb-5175-cd2c-0000e225c367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2ba57c-f815-9819-c691-0000d6516539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9d0d11-4a1d-37c2-27d7-0000d2821d87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cb4a22-910f-e8b7-b2df-0000c99f6bdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b320519e-ff1b-d640-9990-00009b359c3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01672fc5-7811-3d43-ad81-0000a2d8dd92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7772b37a-8d2e-dd39-1f18-0000dcf34534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdfc2bea-80c8-e671-edad-00009278533b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cacb83c-954e-79a8-6ac5-00002a7b9255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3a8a18-4893-4c37-31f6-0000e1231e6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cd6af-2800-887d-2d2d-0000e53161a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb6575-211a-f405-7850-0000e2751a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b167cf4-8322-e941-2b89-000031e51d32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189c2c22-7ca2-2259-3829-00000f3763f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afcff6fa-b83e-1b04-593d-000005182a1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d181c1-6a2e-91b8-a1ea-0000b757f2c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a581c1ca-f8b7-76c6-181d-000020100324","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a661ef52-d511-dd1a-5a13-0000781d013b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed761aec-6a88-ba7c-ee0b-00005dc54255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aecdd26-9e21-b173-6e45-0000559c6a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffedcb4-5d34-960a-2763-000041a946b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac3c65c-1c26-d2a1-ca7c-00000e1d7122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949d8595-cd49-63a5-a5cf-0000c7e4bcd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d510ca-cf5c-3817-07ad-0000d435627a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1954db1e-d297-de95-6f5b-0000ec0442f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68da59df-5253-66a6-82e3-00007fdcea1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e98d2e-ec90-8401-21e1-0000915e9228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c24da40-a3c8-1793-70c2-0000c3380146","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65403786-d1a2-4d26-d256-0000f715c35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0284d2-42b5-5fc1-feb6-0000cb9a984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/cheat_X.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/cheat_X.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f9db90-2936-3186-740b-0000afc8ab15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ab6392-5975-30e3-fddd-000005356b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R6.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e309460-8816-45e1-3f59-00008f55f112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/hIEGQ.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/hIEGQ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a105b9-1307-e754-3bac-0000e25fe7ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93903773-4361-efb9-dc8c-0000c2c9a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd05d0a-fe6a-f484-159e-00007027314e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67317c84-39e9-cc7b-c803-0000c01ec055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d462a0d4-03db-ab06-a52d-0000734d640b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fb2474-2b30-1051-13a8-00007c094ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086e7fa1-7417-4e3a-9774-00002e615b97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e7f8918-e5f2-4bfe-d573-0000ccb8f8f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20591c2-53da-5b96-fe14-00007e6d48b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68690e4e-741c-1b75-94b2-0000249f117e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/muvaro.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/muvaro.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b578b3a-01b4-687b-d602-0000f0f2a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'http://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec02de0-34d1-445a-7084-0000e6da0ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/img_203145.png","pattern":"[url:value = 'http://107.175.88.87/22/img_203145.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f2f892-b5bb-874c-acd4-00008537d117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/img_201031.png","pattern":"[url:value = 'http://172.245.209.133/70/img_201031.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd79b9d8-7d23-cbde-4dc1-00006b32fdb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta","pattern":"[url:value = 'http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e829e11-f247-94b7-cbd7-000005e6c91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/DAD/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/DAD/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df009767-3aa5-746b-3071-000087ee8409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/POT/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/POT/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80b72bc-ab3c-13d7-87b1-0000b2e9809e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://effectively32.infinityfree.me/img_072806.png","pattern":"[url:value = 'https://effectively32.infinityfree.me/img_072806.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68918ac6-0c85-aad6-a99a-000027307c27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05447cf-318a-2104-cc08-0000bdbbd82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.103/sshd","pattern":"[url:value = 'http://94.154.43.103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a8a712-9f1b-5505-f4e6-0000d29f3343","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i686","pattern":"[url:value = 'http://94.154.43.236/exodus.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13c29da-ff46-3e84-c166-00001f4116f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mips","pattern":"[url:value = 'http://94.154.43.236/exodus.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf36deeb-7115-1c8e-cf7e-000081c00728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sh4","pattern":"[url:value = 'http://94.154.43.180/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6366143-5173-1918-219d-000035f6b9be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sh4","pattern":"[url:value = 'http://94.154.43.236/exodus.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d85feb-44fa-5699-3c91-0000e4ea6157","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv6l","pattern":"[url:value = 'http://94.154.43.180/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4a524a-2e94-96b3-8a83-000097ffda0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm5","pattern":"[url:value = 'http://94.154.43.236/exodus.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee194b-5a0f-a293-a564-0000540b41ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i586","pattern":"[url:value = 'http://94.154.43.236/exodus.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc36eaa-a68b-391f-8fcb-0000d98a48e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv7l","pattern":"[url:value = 'http://94.154.43.180/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4d62dc-67ba-2bfd-baf3-00002f43bd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm4","pattern":"[url:value = 'http://94.154.43.236/exodus.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650117c-1519-44b4-fb0c-0000912fa6e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sparc","pattern":"[url:value = 'http://94.154.43.236/exodus.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d101d0c-61d0-508e-7ada-00001fb7c02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.m68k","pattern":"[url:value = 'http://94.154.43.236/exodus.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090802bf-520d-8199-0753-00000699163a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mips","pattern":"[url:value = 'http://94.154.43.180/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724303f0-e2ed-60b6-e32e-0000854a75e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm6","pattern":"[url:value = 'http://94.154.43.236/exodus.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef50c28-86a6-4529-8fe7-0000a34a1b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv5l","pattern":"[url:value = 'http://94.154.43.180/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05443366-64cb-1d1d-b315-00003df61280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm7","pattern":"[url:value = 'http://94.154.43.236/exodus.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab50b080-c603-9156-5b36-00009aeda1c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sparc","pattern":"[url:value = 'http://94.154.43.180/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90047a3d-557b-77eb-9796-00000a786698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mipsel","pattern":"[url:value = 'http://94.154.43.180/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd62605a-af93-99a2-eb36-0000531c85a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.x86_64","pattern":"[url:value = 'http://94.154.43.180/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ee3d69-8b33-76a8-9eb8-00009e2a3237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv4l","pattern":"[url:value = 'http://94.154.43.180/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83648314-50fa-40d4-4824-0000b5282048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.ppc","pattern":"[url:value = 'http://94.154.43.236/exodus.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65db5ec-17a9-3c42-75c7-0000d8e61b68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.powerpc","pattern":"[url:value = 'http://94.154.43.180/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64eeef13-17a3-3cb8-4029-0000744278bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mpsl","pattern":"[url:value = 'http://94.154.43.236/exodus.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed6b2da-bb55-07b5-d559-0000cd2b4e3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.x86","pattern":"[url:value = 'http://94.154.43.236/exodus.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45243669-0851-46c6-3b93-0000066fc0e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.m68k","pattern":"[url:value = 'http://94.154.43.180/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3dec87-1a71-9fe4-6e33-0000baafb874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a43ba3-4a3a-70b9-d999-0000c2412efb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://wealthishealth.free.je/img_234525.png","pattern":"[url:value = 'https://wealthishealth.free.je/img_234525.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f1c554-ad69-d143-6d04-0000e3f422bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/SO_08072026.rar","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/SO_08072026.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d02273c-e1d2-ce98-cd68-0000edcc8a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bc95a3-a604-17d7-7cf6-0000e1a927df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://89.23.107.5/m/jscotbpl.dat","pattern":"[url:value = 'https://89.23.107.5/m/jscotbpl.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594bc740-dae0-ccc4-de4a-0000e15911a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meridia.rs/filess/Teleg.exe","pattern":"[url:value = 'https://meridia.rs/filess/Teleg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0aa025a-c610-16cf-be73-00009168c67c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/steepleadmit.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/steepleadmit.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33c14e4-0ec4-102b-fddd-00005b5c96a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/electricityjog.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/electricityjog.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5339bafb-c2ac-be1c-213c-00000cc817f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12d7373-28ed-2c94-0d0a-0000e30ce526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3707c6ed-cfc7-a538-b387-00005688e301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232f9ec8-be04-cfd9-b994-00002fd918b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a553b7c-9dd6-b458-a213-00008e2e9e53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/bin.sh","pattern":"[url:value = 'http://61.156.97.162:50385/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d281863b-4cc3-8cd6-ac6c-00002b2ec376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/bin.sh","pattern":"[url:value = 'http://116.59.13.48:57768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b13cfef-16e6-4f3c-c069-00009e145807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/i","pattern":"[url:value = 'http://61.156.97.162:50385/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d52b82c-8302-c0f5-03d3-00006c58ee6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://yakult-hk.com/DDOS.zip","pattern":"[url:value = 'http://yakult-hk.com/DDOS.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f901d84-9276-b1c3-06ad-00001d290935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/bin.sh","pattern":"[url:value = 'http://123.14.185.19:44899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d3d92a-9e33-5d58-c405-00008e8c7bf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.118.111:40216/i","pattern":"[url:value = 'http://110.37.118.111:40216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7efad9f-18db-0a80-cc76-000029258799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/bin.sh","pattern":"[url:value = 'http://159.255.7.120:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af4847e-cbd1-904d-220b-00004f266bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/i","pattern":"[url:value = 'http://123.14.185.19:44899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffe5662-8294-1c64-c1e7-000009c17fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/i","pattern":"[url:value = 'http://116.59.13.48:57768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05604c9f-51df-f79e-1a28-00001347db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.17.189:45420/i","pattern":"[url:value = 'http://182.121.17.189:45420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef80b587-c375-0c3f-78ea-000064069199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.8.131.222:37740/i","pattern":"[url:value = 'http://27.8.131.222:37740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d13a441-9d45-d040-0a97-0000cbfb9a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.10.99:39779/bin.sh","pattern":"[url:value = 'http://123.129.10.99:39779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2104c949-dc07-151e-8052-000096685bde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/bin.sh","pattern":"[url:value = 'http://196.189.98.110:42979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bee8b584-9af7-cc41-1472-00002529c6fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/bin.sh","pattern":"[url:value = 'http://123.14.181.142:56703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c461d1-9fc9-39ac-1296-000098d246b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/windows","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/windows']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--843a0d62-e3e7-dea1-550e-0000cc87fd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/linux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b44b8b-cc30-475c-b373-0000c69750b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/mac","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/mac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcb5055-569e-251b-df71-0000280cefa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/bin.sh","pattern":"[url:value = 'http://124.95.24.225:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f4e67a-95e9-bec8-96e8-00001fe4ca60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/i","pattern":"[url:value = 'http://123.14.181.142:56703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf4b338a-bdef-0323-4643-00000db1261f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/bin.sh","pattern":"[url:value = 'http://222.137.25.131:51261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d136039-d25f-9d22-f8cf-00003e8fb1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/i","pattern":"[url:value = 'http://124.95.24.225:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd47610-8eec-bda6-c6af-0000108b2e9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/bin.sh","pattern":"[url:value = 'http://125.41.8.245:37624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1ac36e-5797-bc40-11ff-0000ab8ade39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/i","pattern":"[url:value = 'http://222.137.25.131:51261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6d0d68-58b4-e087-d0f1-0000341fbc92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/i","pattern":"[url:value = 'http://196.189.98.110:42979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c44b5-5ae5-41fa-43ae-0000dc9cfefc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.22.216:46217/i","pattern":"[url:value = 'http://110.37.22.216:46217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a85dba9-16a1-3661-c255-0000ddc14850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.24.27.232:57681/i","pattern":"[url:value = 'http://218.24.27.232:57681/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e6111d-5b74-d4f5-1bf3-0000fa381199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/i","pattern":"[url:value = 'http://110.36.72.194:41902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c144434-ed5a-10fd-3799-000059db56c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/bin.sh","pattern":"[url:value = 'http://123.5.148.113:60247/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c15894-175d-ea33-6d0f-0000906d700c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/i","pattern":"[url:value = 'http://123.5.148.113:60247/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2e33b8-5f89-1424-0271-000017868287","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/sc.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/sc.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--038d247f-d073-3602-a445-0000c93a74fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/exe.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/exe.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad608ac7-ba2a-f75f-27e8-0000ec48d45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/6.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/6.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa73a8ec-7b37-595e-f343-0000fb5c7af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--989207b4-8d19-4293-ff0e-000067617755","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/oldboss","pattern":"[url:value = 'http://rippled.cleverpondky.com/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbc1f90-665a-803b-2f1b-000006e80ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/checkmacos.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f646456c-da31-882d-afe8-0000a70a28f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traffaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab19061-cafc-bd26-3f30-00007044ede3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cliaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc084d49-d790-1ad5-7bf0-0000c0314a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/proot","pattern":"[url:value = 'http://rippled.cleverpondky.com/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c31947-ebfe-6f07-a522-000018cee44e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check1.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3250288-482a-0c18-20af-00006262b9b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9a324c-bdb7-2046-be37-0000705c1f0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto1","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887deef8-4b9a-6bd2-7b65-0000a1e8b4ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cli","pattern":"[url:value = 'http://rippled.cleverpondky.com/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6a0f0a-1097-7ab4-29b5-0000d31e549e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.80.33:54187/Mozi.m","pattern":"[url:value = 'http://115.51.80.33:54187/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3882caac-c05a-9c63-d866-000016b73c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/Error84","pattern":"[url:value = 'http://rippled.cleverpondky.com/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66aa9fe6-61cb-7753-c529-000099c335f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/wd1337","pattern":"[url:value = 'http://rippled.cleverpondky.com/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe714c3b-1c22-64a1-0fd3-0000a7860e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/syst3md","pattern":"[url:value = 'http://rippled.cleverpondky.com/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d5db07-4179-65cd-96d0-0000654c69e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/nvidia.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a237eb2c-4936-6216-ecc2-0000c01675a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/boss","pattern":"[url:value = 'http://rippled.cleverpondky.com/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb4d701-359c-4731-6e4d-0000f7c10b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/log","pattern":"[url:value = 'http://rippled.cleverpondky.com/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--216d0c82-e3e7-d1e5-41e1-00008971d888","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traff","pattern":"[url:value = 'http://rippled.cleverpondky.com/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a130b84-5de4-e9bb-4fe5-000075006ecd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/bin.sh","pattern":"[url:value = 'http://124.94.125.230:34268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684b83df-04bc-8316-bc9e-00008303645b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/package","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/package']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5271bd-e4d4-0575-0cc5-00008ab1507e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstrap","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstrap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e2e217-7d1c-5347-0673-0000cf53e2a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quick-load.vercel.app/api/settings/env","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/env']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cca01b0-93ec-0028-97bc-00005382a15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.12:50068/i","pattern":"[url:value = 'http://115.56.147.12:50068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c748cd43-189d-bb52-4cfa-000080f91651","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.230.18.121:41849/bin.sh","pattern":"[url:value = 'http://115.230.18.121:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4995ac20-48e9-eef5-9283-00004eec9729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/bin.sh","pattern":"[url:value = 'http://42.87.190.196:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9701f0-4ce2-754f-6445-000036c201b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/bin.sh","pattern":"[url:value = 'http://110.36.72.194:41902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8428eac-be21-5ca8-fd00-000019c6740b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/bin.sh","pattern":"[url:value = 'http://115.56.10.15:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3879d905-59bd-76ba-de63-00008b9e30b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/i","pattern":"[url:value = 'http://42.87.190.196:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ad9130-51ff-0a8a-36cf-00001020c472","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/bin.sh","pattern":"[url:value = 'http://221.15.195.117:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--890601e8-7d7d-86db-530f-0000a3ff504b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/i","pattern":"[url:value = 'http://115.56.10.15:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e603698-5623-ba79-baab-0000c3d85c55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/bin.sh","pattern":"[url:value = 'http://42.239.231.246:37689/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d056c7-ec19-7792-d1e1-00000aa4ed3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/i","pattern":"[url:value = 'http://221.15.195.117:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198f5b41-7409-296e-16e2-0000a166b86e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/i","pattern":"[url:value = 'http://42.239.231.246:37689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a383ad-2edc-75df-00c6-00007aa7b27e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/bin.sh","pattern":"[url:value = 'http://222.142.223.175:57022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01609c-717c-243d-699e-000012855fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/bin.sh","pattern":"[url:value = 'http://182.116.88.229:47375/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85e272f-78b7-e13b-446f-000091718a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.234.134:45451/bin.sh","pattern":"[url:value = 'http://182.122.234.134:45451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d738e191-e288-90ba-4cbd-000067c0ed8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/bin.sh","pattern":"[url:value = 'http://175.151.217.170:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b55ed7e1-6f09-6197-eefd-00001efcd0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.116.98:56771/i","pattern":"[url:value = 'http://124.94.116.98:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d01189-2b0a-e70e-67d8-0000cf98940d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/bin.sh","pattern":"[url:value = 'http://196.189.68.239:60182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7993e-8432-fe05-e67b-00002f059a14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/i","pattern":"[url:value = 'http://123.10.146.56:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62187c11-5043-90ee-d8e5-000079742227","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/i","pattern":"[url:value = 'http://182.116.88.229:47375/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22fcbe90-d07d-462b-e638-0000c728c07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e5500","pattern":"[url:value = 'http://130.12.182.77/main.e5500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e73b905-6fad-4053-4c93-00000eb6b23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32","pattern":"[url:value = 'http://130.12.182.77/main.mips32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--320a0fe7-aa9e-f8f5-61ad-00003f967668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64r6el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64r6el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26044ea8-0169-00da-e02f-00004a8aefc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.m68k-68xxx","pattern":"[url:value = 'http://130.12.182.77/main.m68k-68xxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9f2ce9-d964-040e-61ca-00000bc44b36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe79f59-2342-ce87-cbc4-00005facb1c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/i","pattern":"[url:value = 'http://175.151.217.170:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c91903-7742-1f24-0f58-00008f88287f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparcv8","pattern":"[url:value = 'http://130.12.182.77/main.sparcv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b02dc1-0d6a-8f01-cfd2-00008f505008","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8","pattern":"[url:value = 'http://130.12.182.77/main.power8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3049117e-56de-02e1-ad2e-0000f6c0dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e6500","pattern":"[url:value = 'http://130.12.182.77/main.e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098bbba0-7b24-01ed-394a-00005055351c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.ppc440fp","pattern":"[url:value = 'http://130.12.182.77/main.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a7107e-9a6d-e27c-d107-0000a869246e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r5el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r5el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc96da0-62d6-376e-25b0-00001fe5771d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.aarch64be","pattern":"[url:value = 'http://130.12.182.77/main.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecadcf8-d789-4895-0d38-0000199dc695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v4","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9983dc-6609-f832-23d3-0000e9986928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-i7","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-i7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2277ab49-686f-8177-3d30-000008af727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8le","pattern":"[url:value = 'http://130.12.182.77/main.power8le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae495b-2fbb-0e2d-2d04-0000844afe2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v3","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caae28f-4ff4-ca5b-3662-00004454c207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1452997d-b5ed-92d9-28d3-00008db9bf32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64","pattern":"[url:value = 'http://130.12.182.77/main.x86-64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5999ca-ba7c-ec65-6746-0000da7a8ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-core2","pattern":"[url:value = 'http://130.12.182.77/main.x86-core2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e1ae27-d4a2-2215-4d51-00002efd56c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r6el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r6el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a979cd-89ae-a595-160d-00003cf69949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v2","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ab3a8-bd7f-a87c-c7cd-0000374e7d42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.s390x","pattern":"[url:value = 'http://130.12.182.77/main.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a54c80e-e2eb-38f9-758b-000091cda015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-i686","pattern":"[url:value = 'http://130.12.182.77/main.x86-i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5f63be-653f-2a56-8ff6-00008eb2e27b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e500mc","pattern":"[url:value = 'http://130.12.182.77/main.e500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8691e00c-ca7f-3c6e-9815-0000241aec72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4aeb","pattern":"[url:value = 'http://130.12.182.77/main.sh4aeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0404546d-8f2b-58ba-d5cd-00006dc34190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/f","pattern":"[url:value = 'http://130.12.182.77/f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d061a2d-d631-c893-d23f-00009dadcf8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparc64","pattern":"[url:value = 'http://130.12.182.77/main.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a1f20ed-3613-d963-7c43-00004dc02f90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4musl","pattern":"[url:value = 'http://130.12.182.77/main.sh4musl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55cbdad-3ccd-de02-159c-000016604662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/i","pattern":"[url:value = 'http://196.189.68.239:60182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e025c85-7fa8-0fd0-4431-0000eb88efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/bin.sh","pattern":"[url:value = 'http://115.63.150.75:33073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4d565b6-65da-de1e-07e7-0000db967e01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/i","pattern":"[url:value = 'http://115.63.150.75:33073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6987bb59-3822-b9a7-f3ef-0000e3f63108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/i","pattern":"[url:value = 'http://222.142.223.175:57022/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5961a06a-7ed6-4943-97b5-00002584e626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/i","pattern":"[url:value = 'http://124.94.125.230:34268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16904ecc-9325-2f21-4cc8-0000f236db53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/i","pattern":"[url:value = 'http://123.4.234.31:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee54e51-054f-854b-c1b1-00002792756b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/bin.sh","pattern":"[url:value = 'http://105.186.140.157:48423/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4730c387-7f76-7708-1d30-0000d602fccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:36981/i","pattern":"[url:value = 'http://120.28.194.160:36981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bf6219-e01f-86ba-b64e-0000eb947ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.246:46289/i","pattern":"[url:value = 'http://123.4.234.246:46289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b69ce9-1693-c418-6410-0000adb37db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.216:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea315355-6978-dc22-0783-00005e49a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/i","pattern":"[url:value = 'http://105.186.140.157:48423/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551a6d3e-0def-b3ce-ade2-0000f7b261f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/i","pattern":"[url:value = 'http://125.43.107.216:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962d0e14-5e0e-89cc-f3fe-000034053f6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.49:47371/i","pattern":"[url:value = 'http://125.43.0.49:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee49def8-2bb4-c803-6be2-00005f1a768d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/bin.sh","pattern":"[url:value = 'http://119.186.208.189:49406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b005f-bb8b-a629-d8cc-000019f3e520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mipsel","pattern":"[url:value = 'http://94.183.233.225/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1472d27d-b2b5-1d45-17fd-0000a55a0934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mips","pattern":"[url:value = 'http://94.183.233.225/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb7d455-a663-832e-85ee-00002e508f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/bin.sh","pattern":"[url:value = 'http://123.8.40.241:54434/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a16ab62-126b-7cd9-832e-000006028ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86","pattern":"[url:value = 'http://94.183.233.225/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5903997b-c053-a340-fc8d-00009558a2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm4","pattern":"[url:value = 'http://94.183.233.225/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159eaae2-f825-a7ef-05d2-00001d4fab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_powerpc","pattern":"[url:value = 'http://94.183.233.225/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27d1a38-14e2-f560-06bb-00004097061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86_64","pattern":"[url:value = 'http://94.183.233.225/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70df857-2710-ba1c-14c6-00003f516a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm6","pattern":"[url:value = 'http://94.183.233.225/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e04a9ed-9572-0dc8-6d7d-00002de4c5ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm5","pattern":"[url:value = 'http://94.183.233.225/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00ac8c1-c846-ad0a-d805-000087ed0d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm7","pattern":"[url:value = 'http://94.183.233.225/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0260513f-588a-1e0a-2237-00003553ea4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/i","pattern":"[url:value = 'http://123.8.40.241:54434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d696c51a-ffcf-80ad-ab33-00004a2676a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.67.222:54368/i","pattern":"[url:value = 'http://115.56.67.222:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489fc370-c85f-8c02-d1ef-000020e027ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/i","pattern":"[url:value = 'http://219.157.10.128:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26285b0-d9b1-49b4-7a93-0000d460d706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/i","pattern":"[url:value = 'http://119.186.208.189:49406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cef7605b-1a80-3b43-96a7-0000d2bb8829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/bin.sh","pattern":"[url:value = 'http://182.126.213.80:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af0f546-fd79-0230-ec86-0000541753a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/i","pattern":"[url:value = 'http://182.126.213.80:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--608dd15b-4e3b-3722-896b-00009fb58f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/bin.sh","pattern":"[url:value = 'http://124.6.165.86:44671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da818090-6816-c919-4417-0000a859d679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/bin.sh","pattern":"[url:value = 'http://124.234.239.227:55577/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b384ca8-92ea-11f1-a01c-000057d3f1da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/i","pattern":"[url:value = 'http://61.52.7.68:35582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15af8391-cb5c-9560-f009-00005e60e28d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/i","pattern":"[url:value = 'http://124.6.165.86:44671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da311577-27d1-1468-7341-0000c3a3dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/i","pattern":"[url:value = 'http://119.109.140.49:40757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e43a256-0038-a6bf-84e5-0000efa3d9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/i","pattern":"[url:value = 'http://124.234.239.227:55577/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292cd8b9-e64e-d4cc-0c31-000045c0a3ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/molakc","pattern":"[url:value = 'http://178.16.54.109/molakc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a98c6c7-2ee8-b7d0-b712-000003e2ae5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.115.143:48808/i","pattern":"[url:value = 'http://182.116.115.143:48808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9251e248-8f26-be36-02ef-0000fadb6948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/bin.sh","pattern":"[url:value = 'http://182.113.2.97:36675/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f89076-3293-c19d-dab8-0000662da1ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/i","pattern":"[url:value = 'http://182.113.2.97:36675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af81952c-6dd7-2167-5289-000053a8376c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/bin.sh","pattern":"[url:value = 'http://115.56.42.114:53571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e308fde-58f2-9613-a20b-0000e9a3e9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/i","pattern":"[url:value = 'http://115.56.42.114:53571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11778cd6-42f7-ee9f-9217-000024253fe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/bin.sh","pattern":"[url:value = 'http://115.48.163.9:60317/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44f7615-f947-ae87-e76f-0000719da6e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/rew3rtghymrag7y/file","pattern":"[url:value = 'https://www.mediafire.com/file/rew3rtghymrag7y/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6b07a4-e7e0-29cc-1912-0000bf269eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5d7c6e-6c11-02e4-8e23-0000206fb8ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.252.178.228/update1.zip","pattern":"[url:value = 'http://192.252.178.228/update1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f81e0ca-c0a8-0ab9-2360-0000ac8f16fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://199.217.99.6/Troubleshoot.ps1","pattern":"[url:value = 'http://199.217.99.6/Troubleshoot.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b853ca9d-368d-cc08-63af-0000c2ca513f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41335f5-4bd0-00df-fc94-000061f67729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9602e5b-a14a-ad34-b4a8-0000d22aec32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a17c429-fc73-d2d1-fa64-0000efafaf46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3cb5d9-4c6f-f511-aff7-0000c0f36df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.386","pattern":"[url:value = 'http://92.5.66.49:8080/bot.386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04104d5b-dc81-ef87-9683-0000ccffa5d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9338921-9077-3a8f-ba4a-000098682bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.riscv64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29046e46-dff6-27d8-f8bb-00007c7236c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46b1e21-fc85-e4d0-a7ad-0000c3d8ee92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mipsle","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b60f4-5dd6-4abb-c34a-00008ffa0c42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1ee21e-ba2c-4b19-c7b2-000074896776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.s390x","pattern":"[url:value = 'http://92.5.66.49:8080/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c359a16-ccc9-89c8-f6c1-000031c03c93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b3b4a-faf3-b329-c59e-0000cfa3f896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2199de09-0335-4cb3-7ddd-00006dcfbd71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/Mozi.a","pattern":"[url:value = 'http://221.15.226.18:57698/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b849b3-0dba-62c2-048c-0000d76fcac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.amd64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73bc9a6-b7c0-cc49-ca8c-000082b0e1a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/i","pattern":"[url:value = 'http://115.48.163.9:60317/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e834f52-2ed9-3abf-f082-0000981e3e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/bin.sh","pattern":"[url:value = 'http://123.11.207.175:45931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de246fbe-c98d-834c-4d64-0000e5d005d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18332b81-b171-02f0-2cce-0000dd21a87e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e55fd5","pattern":"[url:value = 'http://5.182.210.174/e55fd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10179294-bdb7-7909-2aad-0000cec838cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xkw","pattern":"[url:value = 'http://129.121.110.105/xkw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d118c4f7-b335-074a-0a5a-0000f807aa36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/759f0d","pattern":"[url:value = 'http://5.182.210.174/759f0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef0dc74-4876-377f-151a-000037befdd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Y3P","pattern":"[url:value = 'http://129.121.110.105/Y3P']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b947860e-34e6-20e4-3b92-00007b8983e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2NXl","pattern":"[url:value = 'http://129.121.110.105/2NXl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fa6eca-05bf-d382-cd97-0000ce580be6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4f193","pattern":"[url:value = 'http://5.182.210.174/f4f193']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0469762f-7897-40c2-0bd0-00008a6c43fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/783f2a","pattern":"[url:value = 'http://5.182.210.174/783f2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e3b52d-8a65-3bda-100e-00006452790a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/99764f","pattern":"[url:value = 'http://5.182.210.174/99764f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ddad4e-87ff-538d-7853-00006db989ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0eaa32","pattern":"[url:value = 'http://5.182.210.174/0eaa32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c38ad1-a13e-afe2-a1fe-0000bb3cf9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/yx2w","pattern":"[url:value = 'http://129.121.110.105/yx2w']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f144b20-0e89-27c8-b2e3-0000c56c41e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/19e860","pattern":"[url:value = 'http://5.182.210.174/19e860']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597f1472-6f4e-a7a5-c04e-00004d174231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/lWC","pattern":"[url:value = 'http://129.121.110.105/lWC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e4990e8-4530-1667-4f0c-00002dc6b7f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Wqm","pattern":"[url:value = 'http://129.121.110.105/Wqm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67d809d-26cf-70e9-9967-0000148afb01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6c209","pattern":"[url:value = 'http://5.182.210.174/d6c209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6c589f-15ef-2910-48b1-0000345f4046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/747c0d","pattern":"[url:value = 'http://5.182.210.174/747c0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767a3800-6371-6d79-c254-000053396101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fXd","pattern":"[url:value = 'http://129.121.110.105/fXd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231b461e-f2d4-d25f-0d17-0000ce88ea98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f39a8e","pattern":"[url:value = 'http://5.182.210.174/f39a8e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b02cc0-5107-d306-8234-000097890b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/704581","pattern":"[url:value = 'http://5.182.210.174/704581']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29cf242b-7df4-2aef-6cc3-00003a5dd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef363f","pattern":"[url:value = 'http://5.182.210.174/ef363f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a365d07c-9a6d-d45d-8676-0000157d84f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/575708","pattern":"[url:value = 'http://5.182.210.174/575708']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78156e6-17c3-a39d-31b9-00002f47a02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cd049e","pattern":"[url:value = 'http://5.182.210.174/cd049e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc6244e8-603b-b10a-9b19-0000642e4e0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f91198","pattern":"[url:value = 'http://5.182.210.174/f91198']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1a35f-a6c3-146f-85aa-0000c1b1113c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/rG3i","pattern":"[url:value = 'http://129.121.110.105/rG3i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a090cb-3f53-c67b-d73f-0000ce1b1568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cf53f","pattern":"[url:value = 'http://5.182.210.174/6cf53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64ec990-86e2-8ca7-cd1f-00008239fd08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/RzWf","pattern":"[url:value = 'http://129.121.110.105/RzWf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f236bbf-391f-c597-7953-00001e1a3fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f818ff","pattern":"[url:value = 'http://5.182.210.174/f818ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1a6e08c-6248-1ce7-2f8c-00007d9252ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/7uv8","pattern":"[url:value = 'http://129.121.110.105/7uv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced9603f-552e-dbc2-2457-000041b3e61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xl01","pattern":"[url:value = 'http://129.121.110.105/xl01']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2d8e20-89dd-366d-ba55-00002ce4ea73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e8e811","pattern":"[url:value = 'http://5.182.210.174/e8e811']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e159841-4a9e-7445-8004-0000516b468e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b0256","pattern":"[url:value = 'http://5.182.210.174/3b0256']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df249d2-ff14-c024-bd92-00000873c3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5b334","pattern":"[url:value = 'http://5.182.210.174/a5b334']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa1c95d-cd6b-3507-ff14-00002bfb078b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/04e832","pattern":"[url:value = 'http://5.182.210.174/04e832']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e55471-89b9-6d96-f1bb-0000aff2c936","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/C1iC","pattern":"[url:value = 'http://129.121.110.105/C1iC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad177a19-04ef-70e0-5e41-0000b182c947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4vqU","pattern":"[url:value = 'http://129.121.110.105/4vqU']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848f2744-0bc9-dcbb-42f9-000024274ce2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4yKQ","pattern":"[url:value = 'http://129.121.110.105/4yKQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b6dc14-ece9-32b2-8545-0000e0d6d2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8a320b","pattern":"[url:value = 'http://5.182.210.174/8a320b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f8686f-c26a-3d86-31b6-0000a9bf5280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ot7","pattern":"[url:value = 'http://129.121.110.105/ot7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8b074e0-5d35-1f48-6811-0000dda69ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/21a9d4","pattern":"[url:value = 'http://5.182.210.174/21a9d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d78c006-8328-1915-ba67-000065df1701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/44e32f","pattern":"[url:value = 'http://5.182.210.174/44e32f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef4187c-f01d-6f6c-2968-000091567ab8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstraplinux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstraplinux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842265f6-4ae5-c628-ca39-000088d5944e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc8b91","pattern":"[url:value = 'http://5.182.210.174/cc8b91']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25058f6e-932e-a282-a1d7-00007a4ed3aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/80b16f","pattern":"[url:value = 'http://5.182.210.174/80b16f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeafc524-0dd4-b4c9-c25f-00003bd6364e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/82c703","pattern":"[url:value = 'http://5.182.210.174/82c703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2303af9-cf49-9075-acde-00004d13e386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/924208","pattern":"[url:value = 'http://5.182.210.174/924208']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8d5afe-741d-156e-c14a-00009871516b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2ca244","pattern":"[url:value = 'http://5.182.210.174/2ca244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c3a833f-820d-273d-1a16-00000de3f575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7215c9","pattern":"[url:value = 'http://5.182.210.174/7215c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86263e16-b4c1-ca4f-9435-00007f15046a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fd89ab","pattern":"[url:value = 'http://5.182.210.174/fd89ab']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ebece3-847c-cd86-797e-00009ac1ac92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fb21f1","pattern":"[url:value = 'http://5.182.210.174/fb21f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d54d1ab-f683-ab88-7a49-0000d57e96f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/690e95","pattern":"[url:value = 'http://5.182.210.174/690e95']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e284dc10-b88d-5645-2fd1-00002f082b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/32441c","pattern":"[url:value = 'http://5.182.210.174/32441c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60efa7f1-ffe9-d8f2-a808-0000918389ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/22393a","pattern":"[url:value = 'http://5.182.210.174/22393a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985b24d5-c8eb-f183-c10c-00007265db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb5263","pattern":"[url:value = 'http://5.182.210.174/eb5263']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b13d90b-2caa-4146-0b9c-00002c67954c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.243.228.138:53440/bin.sh","pattern":"[url:value = 'http://42.243.228.138:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--816a97a0-f243-c45c-237e-0000be698cd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://114.227.48.185:58022/bin.sh","pattern":"[url:value = 'http://114.227.48.185:58022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28183dcb-19b2-e97c-8ec1-00001008eccf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d83cda1-cf4e-e373-4b86-00002629090d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a9ad4f-fd0f-06bf-2747-00003b1356bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211c1f-99f4-061b-b52c-00004912ec9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://citrusmangos.ct.ws/img_112634.png","pattern":"[url:value = 'https://citrusmangos.ct.ws/img_112634.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3c6733-c7a1-d9b5-f2c9-0000d7889f7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e988b3-6426-3885-c6a7-000019e24dfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428f67c5-78f2-a5d8-a4fa-000034a97296","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/quis.exe","pattern":"[url:value = 'http://91.92.47.8/quis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e56624-c803-38c4-6565-000028f57106","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/CW.exe","pattern":"[url:value = 'http://91.92.47.8/CW.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d340a48-bd1f-b9bc-2928-000051a48594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/bin.sh","pattern":"[url:value = 'http://221.235.197.3:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fbfacb-e90e-eaf3-9981-0000adb01e15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f261eba8-1456-16c2-0574-0000a422326d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebba93d-e0aa-37bf-c17b-0000fbb35ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.79.201:45777/i","pattern":"[url:value = 'http://42.226.79.201:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3dfeabe-9cff-5b9c-2737-0000894b4244","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19855277-0e5f-19e1-f446-0000b097731b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219915ba-fa30-b6b2-2326-000082d9f3bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c3d6b69-8b49-418b-4127-00006d114b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4daec17a-a55c-45b0-4508-00004e9fc085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/i","pattern":"[url:value = 'http://221.235.197.3:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fbe47-c626-b784-501c-000050346012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d22fcd-673f-057b-f06d-000017c0cb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/bin.sh","pattern":"[url:value = 'http://221.15.204.212:38964/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c64cfef-d498-fdbd-a903-00005075bc7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7524844-6edc-d71e-2aee-00003e2095c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59153ed6-3bcd-a8e0-8036-0000516af3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f590799f-fc48-b9ae-99fd-00000ccbeb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d210b2e-9020-e49a-7e4a-00006938e79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.185.120:41148/i","pattern":"[url:value = 'http://115.63.185.120:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fc112d-ca08-2144-4711-000023310d3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/i","pattern":"[url:value = 'http://110.37.106.148:49825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77246e53-30b0-c45f-e1b9-00005df177c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6a86a9-876f-85e9-d9a0-0000e2619495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/i","pattern":"[url:value = 'http://42.237.82.34:58954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf0210a-c573-f3e9-b794-0000c8c327dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/bin.sh","pattern":"[url:value = 'http://42.237.82.34:58954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64455cc3-ce42-fc61-c1a7-00007727ca94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c7a26","pattern":"[url:value = 'http://5.182.210.174/2c7a26']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e50b032a-be30-3f8c-9cf6-00007d530c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a59ff","pattern":"[url:value = 'http://5.182.210.174/1a59ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12433559-b255-0989-76e9-0000daff821f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/155a79","pattern":"[url:value = 'http://5.182.210.174/155a79']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65065a-1443-55d5-2abc-0000fedfdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35c40c","pattern":"[url:value = 'http://5.182.210.174/35c40c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d759de5-bac5-d48e-35fe-0000bfdf262c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b136a3","pattern":"[url:value = 'http://5.182.210.174/b136a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee6ca626-d4b4-fd8c-5c0a-000074ef490e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2419f5","pattern":"[url:value = 'http://5.182.210.174/2419f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f5a66b-4f02-8aae-7fcf-0000857e7cf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07aedd","pattern":"[url:value = 'http://5.182.210.174/07aedd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85851043-8c74-9427-0f8b-000051ba134c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b63d70","pattern":"[url:value = 'http://5.182.210.174/b63d70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d32951ab-29e4-07dd-7f0f-0000c0490385","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/60689f","pattern":"[url:value = 'http://5.182.210.174/60689f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09991385-c18a-2c17-bbc9-0000fbb4f6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d77667","pattern":"[url:value = 'http://5.182.210.174/d77667']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe113ad-020b-2331-9689-0000933418be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c3474","pattern":"[url:value = 'http://5.182.210.174/0c3474']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec6806e-6a44-f43e-2d60-0000ffbb5c04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a4b8b","pattern":"[url:value = 'http://5.182.210.174/4a4b8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ea3f9e-80b2-9bb7-4044-00001bfaf1db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/i","pattern":"[url:value = 'http://221.15.204.212:38964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502fcb55-9bce-a500-fe00-00001dde9a79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/i","pattern":"[url:value = 'http://123.11.207.175:45931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0589fdc-ffd1-ea95-508d-0000e38cc619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.22.108:50309/i","pattern":"[url:value = 'http://123.12.22.108:50309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a804d4-9d48-3a3a-6a51-0000c2973624","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/bin.sh","pattern":"[url:value = 'http://182.113.205.38:37725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a6af18-4f20-b9da-6b3d-0000f069118e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/bin.sh","pattern":"[url:value = 'http://182.114.243.24:39493/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3feef34-98a6-ac69-126f-000054f73819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/i","pattern":"[url:value = 'http://182.114.243.24:39493/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--225ba1e5-1ba9-e512-1ada-000010fa5213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/bin.sh","pattern":"[url:value = 'http://112.248.190.70:45710/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de13ddc-6d8c-ec9c-7797-0000cd0013f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/bin.sh","pattern":"[url:value = 'http://123.11.10.99:56358/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fd9874-2870-8d00-3806-0000dd1a0b94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/i","pattern":"[url:value = 'http://112.248.190.70:45710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fa0db6-bc5e-97ee-2b8c-0000dd63a215","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/bin.sh","pattern":"[url:value = 'http://182.122.195.212:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07ba0179-b9d1-80a2-c2aa-00009df97da5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/bin.sh","pattern":"[url:value = 'http://123.5.83.209:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6870ffd3-a9af-4cbf-afc6-0000b89842e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.25.235.194:33174/i","pattern":"[url:value = 'http://112.25.235.194:33174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ae65fb-9a22-d83d-4571-00006403c8b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/i","pattern":"[url:value = 'http://108.168.0.60:36003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed06863-3af1-2a20-6dbf-000095100332","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/bin.sh","pattern":"[url:value = 'http://123.10.146.56:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--170aa561-f6d2-fa83-e628-00008ec6451c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/bin.sh","pattern":"[url:value = 'http://110.37.58.92:44731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb2d97a-e614-f3d0-e69e-0000d88504b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.224.216/zedx","pattern":"[url:value = 'http://147.182.224.216/zedx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd97d33-57c8-d70c-010d-0000b7c57383","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/i","pattern":"[url:value = 'http://113.228.117.193:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643c5870-fd14-9e97-e9da-0000fd8a8641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:48412/bin.sh","pattern":"[url:value = 'http://210.208.111.26:48412/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d61dfe5-ad29-fe9c-146c-0000674adf66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/i","pattern":"[url:value = 'http://144.48.123.149:50607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2484efb9-6fde-34e1-de20-00000dca280f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/bin.sh","pattern":"[url:value = 'http://31.173.12.38:48285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab5a5e2-bdb3-e7b1-f240-0000366b4e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/bin.sh","pattern":"[url:value = 'http://27.207.139.137:59758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c543583a-141a-e41e-ea7a-0000403de25b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/i","pattern":"[url:value = 'http://159.255.7.120:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fb8a8-909b-84bf-8323-0000f4d521eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:58204/bin.sh","pattern":"[url:value = 'http://27.206.197.243:58204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f280d46-c912-1a1d-ddfc-0000007a62e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://190.109.228.177:37896/i","pattern":"[url:value = 'http://190.109.228.177:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9298b1-e11f-e892-6477-0000977323df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/i","pattern":"[url:value = 'http://42.225.206.253:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd702ff-7bb4-9f00-9454-0000606f544b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/i","pattern":"[url:value = 'http://219.155.193.230:59136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed10f80-10fb-6fb4-25ca-0000630fa08d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/bin.sh","pattern":"[url:value = 'http://119.179.214.25:37703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac17854-9624-9a93-7273-00009446c220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.132.158:59339/i","pattern":"[url:value = 'http://115.48.132.158:59339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4f99e6-6df6-0279-a492-00001ff984a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/i","pattern":"[url:value = 'http://115.57.199.157:51293/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfe7d40-e0b1-d040-7386-000044781063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/i","pattern":"[url:value = 'http://182.117.9.81:37641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff368be-d361-0995-e015-0000b226d452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/i","pattern":"[url:value = 'http://216.249.4.20:36657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67ccad3-309e-2936-90bf-0000131fcca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/bin.sh","pattern":"[url:value = 'http://123.12.225.205:41540/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed1b394-0c6e-b4d5-8639-000030504a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.236.158:50588/bin.sh","pattern":"[url:value = 'http://119.179.236.158:50588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad69af17-b976-5042-29bd-0000f0ee892c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/bin.sh","pattern":"[url:value = 'http://123.14.54.13:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b92de8-5deb-7341-635b-0000c11095f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/bin.sh","pattern":"[url:value = 'http://125.110.46.203:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--815c508a-31a2-e432-2a61-0000c0b29bf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/i","pattern":"[url:value = 'http://61.53.92.34:34684/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--025b1293-3281-c306-454c-00008f6ebbaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.212.236:37136/i","pattern":"[url:value = 'http://182.113.212.236:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbb3c34-afac-d5bf-9447-0000f8541be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/i","pattern":"[url:value = 'http://182.116.70.209:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ec639b-e22b-974b-6afe-0000e25c841e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/i","pattern":"[url:value = 'http://210.208.110.4:37718/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--969296fb-3be1-7049-0552-000074fd06fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/i","pattern":"[url:value = 'http://221.15.4.237:59213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845e1b1b-362e-50b9-f8ab-0000c1e0bed2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/bin.sh","pattern":"[url:value = 'http://123.10.238.107:36973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e17954-33c1-1b30-1d22-0000b633d3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.41.232:60566/i","pattern":"[url:value = 'http://42.235.41.232:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3070d3-fc12-6e69-e346-0000725f8703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/bin.sh","pattern":"[url:value = 'http://210.208.110.4:37718/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d483b45-361c-0094-6267-0000c6922c02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.38.151:38535/i","pattern":"[url:value = 'http://115.59.38.151:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bfa2b2-be76-9788-fd7f-0000f5431f07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.96.94:38510/i","pattern":"[url:value = 'http://123.9.96.94:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2c0c2a-2d0c-e363-9e0c-00005fc1a53b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.68.42:46437/i","pattern":"[url:value = 'http://123.11.68.42:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914b72e1-3a6e-bba9-0b62-0000a0517cc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/i","pattern":"[url:value = 'http://125.26.202.172:59746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dbd2c0b-7acb-055e-2fb4-000074c20ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/i","pattern":"[url:value = 'http://182.119.183.1:55955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c84e6e09-3f91-295f-e0e6-000091bd5457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/i","pattern":"[url:value = 'http://222.134.172.2:44618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56719105-4bfb-f89d-aa13-0000bde57de2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.70:45805/i","pattern":"[url:value = 'http://110.37.89.70:45805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a4c85b-ce2f-5d62-9dc5-00004607be29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.212.105:46118/i","pattern":"[url:value = 'http://125.46.212.105:46118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9207db1f-bc45-5d38-556f-00001fa42806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.168.124:55125/i","pattern":"[url:value = 'http://115.56.168.124:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17dfa324-0f6a-f912-900f-000058748bea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.16.143:54649/i","pattern":"[url:value = 'http://110.36.16.143:54649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df2f8925-9275-d959-54cd-00008b60df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/bin.sh","pattern":"[url:value = 'http://219.155.193.230:59136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3e328-fb48-fe49-a385-000093cf519e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/bin.sh","pattern":"[url:value = 'http://61.53.92.34:34684/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8ce6ac-b144-9857-af0f-0000c83e7a51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.166.115.199:56157/bin.sh","pattern":"[url:value = 'http://175.166.115.199:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a7d93d-1848-7e80-d86d-0000c08d7b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.104.0:41525/i","pattern":"[url:value = 'http://110.37.104.0:41525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a07390e-5900-6cca-6849-00006e087087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/bin.sh","pattern":"[url:value = 'http://156.146.24.110:51345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed72f272-cf0c-62e5-ddb9-00003b826a52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.50.100:43521/bin.sh","pattern":"[url:value = 'http://42.237.50.100:43521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edda8851-d9a8-1e6b-ab40-00000c54284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://200.115.102.2:57794/i","pattern":"[url:value = 'http://200.115.102.2:57794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69e73ca-8d89-c1d3-3a5d-00007bebc298","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.97.247:34050/i","pattern":"[url:value = 'http://115.63.97.247:34050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d059e9-03f6-eda7-a749-0000bfef9a9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.44.180:33342/i","pattern":"[url:value = 'http://42.227.44.180:33342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f118439-b1df-9fc5-eeb6-0000ea93e603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/i","pattern":"[url:value = 'http://125.47.244.3:55442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d553f7d1-4141-c515-8e90-0000d1a26d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.255.227:42646/i","pattern":"[url:value = 'http://110.39.255.227:42646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b209c8-333b-a1e6-b3ea-00009f67ebaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/i","pattern":"[url:value = 'http://42.230.47.176:47866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c2251f-524a-94d9-03a6-00007e95d2c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/i","pattern":"[url:value = 'http://109.236.44.113:59714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18fc7b1-ead8-48fe-343e-0000c9560e00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/i","pattern":"[url:value = 'http://219.157.212.157:59656/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c38611-1927-57ee-978b-0000862620dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/bin.sh","pattern":"[url:value = 'http://182.117.9.81:37641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5164455d-a5f8-40b5-9be1-000057c3e61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.219.168:39833/i","pattern":"[url:value = 'http://123.14.219.168:39833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d74fe0b-f222-2292-8101-00002574d334","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.58:39112/i","pattern":"[url:value = 'http://110.36.25.58:39112/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc97d97-6ae7-ef25-40ad-00007403968b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/i","pattern":"[url:value = 'http://123.173.86.99:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cadea4f-afc1-81b1-bca2-000083464b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/bin.sh","pattern":"[url:value = 'http://123.12.79.182:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa365450-f773-de1c-6904-000089a7667d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/i","pattern":"[url:value = 'http://105.184.49.165:53813/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--967a51f3-1864-aab2-a0c7-000050847c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/i","pattern":"[url:value = 'http://42.53.22.56:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7906b6a2-3578-1c5e-4939-0000757660d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/bin.sh","pattern":"[url:value = 'http://113.228.117.193:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ceb837-f2a9-3efb-2752-000085927d28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/bin.sh","pattern":"[url:value = 'http://42.53.22.56:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1802fa-d1fc-2bfa-b4a0-00006d7f4900","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.236.62:50658/i","pattern":"[url:value = 'http://123.12.236.62:50658/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0ddee67-588a-ca9c-c260-00008171e8b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/i","pattern":"[url:value = 'http://182.116.119.29:53082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28d1e2b-fb39-b9b3-e463-000087262c3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/bin.sh","pattern":"[url:value = 'http://167.250.158.32:40802/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f902b-18c0-db90-0a05-00001afe5baf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/i","pattern":"[url:value = 'http://42.55.212.26:51890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56816565-78f5-af17-39ec-0000385f6067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/bin.sh","pattern":"[url:value = 'http://125.26.202.172:59746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6318f4dd-bae3-1171-36de-0000129b5f41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/bin.sh","pattern":"[url:value = 'http://182.112.39.204:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb41100-8420-a810-6ef1-00006ba311b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/i","pattern":"[url:value = 'http://119.179.214.25:37703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f67cc1e-6ffd-d3e5-4f42-00005657a7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/i","pattern":"[url:value = 'http://123.10.238.107:36973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d556948-5b51-f17c-8b0f-000025c1ec3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.62.66:34836/i","pattern":"[url:value = 'http://219.157.62.66:34836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbcd13-ebe5-36c4-5067-00008543fa42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/bin.sh","pattern":"[url:value = 'http://125.44.219.185:54557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc63296-3464-d96d-5edb-0000929fb2d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/i","pattern":"[url:value = 'http://123.170.100.105:42942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0485c44-79bb-7c4f-c271-0000edecbbe8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.81.19:46242/i","pattern":"[url:value = 'http://27.206.81.19:46242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e677e667-3982-d85f-4672-00007fab2818","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/i","pattern":"[url:value = 'http://110.37.58.92:44731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bcd61d6-f895-e370-d0d5-0000e441e8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/i","pattern":"[url:value = 'http://123.12.225.205:41540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c7a7c4-e716-67b6-89bd-00008696068b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/bin.sh","pattern":"[url:value = 'http://210.208.104.156:36904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bade5c0-ee12-a9ad-cc25-0000eeb70b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/i","pattern":"[url:value = 'http://123.5.186.20:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0feff27-cc0b-afc6-a781-000000553762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.140.248/init.sh","pattern":"[url:value = 'http://181.214.140.248/init.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2414b03-7641-a61f-ff2b-0000e4661ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/bin.sh","pattern":"[url:value = 'http://109.236.44.113:59714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67266c3c-c773-c96f-cbe2-0000c242f86b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/i","pattern":"[url:value = 'http://115.197.132.72:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d27dc67f-46bd-3328-61a0-000018cf1758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:53074/i","pattern":"[url:value = 'http://196.189.35.172:53074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab0afea-c421-3a58-03fb-0000b2fd0398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/bin.sh","pattern":"[url:value = 'http://182.116.119.29:53082/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19fcdc67-0390-846d-7288-00002068ac36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/bin.sh","pattern":"[url:value = 'http://42.179.152.19:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db877bde-9630-6791-211c-0000cc76ebf1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/i","pattern":"[url:value = 'http://125.44.219.185:54557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d63ffde-24eb-d919-eea7-000034fe9009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/bin.sh","pattern":"[url:value = 'http://115.61.120.117:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86079bd7-0fb1-eb8a-668b-00007061a0ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/bin.sh","pattern":"[url:value = 'http://115.58.171.191:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0542f0a0-d22e-fac3-f091-0000a160d9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/bin.sh","pattern":"[url:value = 'http://117.26.227.227:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a296e389-2e10-f3ab-8b5f-000076adf35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.33.96:58607/i","pattern":"[url:value = 'http://182.119.33.96:58607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc3840a-cf24-c007-8619-0000a4630e71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.201.94:60468/bin.sh","pattern":"[url:value = 'http://175.148.201.94:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d988d79-e9f2-afd0-82b6-0000dfafeb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.29.63:58773/i","pattern":"[url:value = 'http://42.230.29.63:58773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e14d8e8-0bda-9fc7-76e0-000000bc5f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.165:52379/i","pattern":"[url:value = 'http://123.5.124.165:52379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321c5a4c-8f5a-9389-5b98-0000d9a3d8a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:42743/i","pattern":"[url:value = 'http://210.208.110.42:42743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88fdf1dc-4836-b8bd-3ae2-0000be4ed72f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/i","pattern":"[url:value = 'http://42.237.60.215:54523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc0283c-e28c-2efd-9f28-00001f3e35fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.182.143:33305/i","pattern":"[url:value = 'http://115.54.182.143:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9953d88f-ed10-af4c-0130-0000a59c56d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/i","pattern":"[url:value = 'http://125.110.46.203:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8d5a451-fd8b-ec94-6f5d-0000a5da5e77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/bin.sh","pattern":"[url:value = 'http://221.15.4.237:59213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e9ed31-8b6d-3549-aff8-0000e3d91de1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/i","pattern":"[url:value = 'http://210.208.104.156:36904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd37fe54-a353-6152-2995-0000ad41aa23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/bin.sh","pattern":"[url:value = 'http://123.5.186.20:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5528690b-7414-217a-0886-000079a9d20e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/i","pattern":"[url:value = 'http://182.122.195.212:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ff516-fabb-fa29-607d-000015a9928d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.32.46:45304/i","pattern":"[url:value = 'http://42.230.32.46:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a98a6a4-32cf-8b67-e84c-00002c8eb071","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/i","pattern":"[url:value = 'http://123.11.10.99:56358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458fc1c9-8feb-2f97-b9ed-0000c5ee909a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.171.67.100:36364/i","pattern":"[url:value = 'http://109.171.67.100:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee4a018-9b15-91dd-35c7-0000ef232d70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/bin.sh","pattern":"[url:value = 'http://105.184.49.165:53813/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bfe99b-eb30-b36c-f262-0000d152f466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/bin.sh","pattern":"[url:value = 'http://123.173.86.99:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71d9994-7eac-395a-2752-0000cde908ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://171.83.59.154:46798/Mozi.m","pattern":"[url:value = 'http://171.83.59.154:46798/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394c1527-1a56-37c4-54fb-000081abfe5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.183.101:34303/i","pattern":"[url:value = 'http://182.115.183.101:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d836aeb3-ad53-c0cc-031d-0000cc5001c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/i","pattern":"[url:value = 'http://117.26.227.227:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37096f1-d727-1277-f0dc-0000376e004a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.14.94:37078/i","pattern":"[url:value = 'http://42.224.14.94:37078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--062eae7b-6c19-843d-8efd-000040805eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.128.149:36887/i","pattern":"[url:value = 'http://124.234.128.149:36887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b2c69-3259-c7cb-cbe7-0000f02b84b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/bin.sh","pattern":"[url:value = 'http://42.55.138.2:60455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8e452f-d5b3-30e1-eb21-0000406951a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.97.33:40194/bin.sh","pattern":"[url:value = 'http://112.239.97.33:40194/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64cc3a8-af3d-75bc-a10e-0000bca0c0e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.135.245:34017/i","pattern":"[url:value = 'http://120.28.135.245:34017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e030cf-b4da-b66a-3391-000011c94009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/i","pattern":"[url:value = 'http://123.5.83.209:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e36f456-dfa3-3bbe-f85a-0000232da6a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1","pattern":"[url:value = 'https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1085830-aae4-fa1e-cbb6-0000aca4ffe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.171.177.193:32861/i","pattern":"[url:value = 'http://45.171.177.193:32861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94fb391b-424e-80c0-15cf-0000c0eeaf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/bin.sh","pattern":"[url:value = 'http://223.105.50.190:53132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba824e4b-f8f0-dd52-ee0d-0000e5f5a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/bin.sh","pattern":"[url:value = 'http://222.142.210.206:51525/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--935a2c9f-aa1c-d2bd-93b4-0000b0b669b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b548ba06-9a97-e386-f257-000096d6b639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.link/ksmd","pattern":"[url:value = 'https://kworker.eth.link/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc96cf5-f320-316b-00f3-00006c89aa57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.179.119.120/install.sh","pattern":"[url:value = 'http://167.179.119.120/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831bfbc8-8bbd-0faa-db23-000016e7734f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd","pattern":"[url:value = 'https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b325dec-fcbe-0be1-2dfa-0000934c1e78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.98.10.60:55555/ksmd","pattern":"[url:value = 'http://216.98.10.60:55555/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f31e28d-7a30-a88f-f4aa-0000200d5c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.limo/ksmd","pattern":"[url:value = 'https://kworker.eth.limo/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ce0ead-0e03-036f-a771-0000c7894910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd","pattern":"[url:value = 'http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0c8e26-0c94-ef08-ac74-0000640086ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/i","pattern":"[url:value = 'http://223.105.50.190:53132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231549e8-af90-196d-aa68-00001fe1d432","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/bin.sh","pattern":"[url:value = 'http://182.126.247.153:53090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f169c919-2348-6ec3-a0d8-0000c9d7685b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/i","pattern":"[url:value = 'http://222.142.210.206:51525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6422b708-bd44-eec0-b1ce-000084816de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/i","pattern":"[url:value = 'http://115.55.197.125:40668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5856f40-b7a0-7d2c-a441-0000fb5bc85c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/i","pattern":"[url:value = 'http://182.126.247.153:53090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b10113-7440-fef5-f59f-00004f6beaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/bin.sh","pattern":"[url:value = 'http://123.12.225.188:60928/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--110e4f68-bb70-fa45-0d62-000022eba1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/bin.sh","pattern":"[url:value = 'http://105.184.45.242:43025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c5a577-3b5b-7b68-7a2c-00009db645a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/i","pattern":"[url:value = 'http://105.184.45.242:43025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2fc819d-7c93-6cde-01d1-0000972e79c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/i","pattern":"[url:value = 'http://123.12.225.188:60928/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a47d2b2-f93d-0b3a-b7ac-0000691a1c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f1ef94-3acd-6d5d-d844-00001d30784a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a730777-2051-2d4e-abe9-000023858d10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/gpon","pattern":"[url:value = 'http://94.154.43.104/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf38292-46a3-e961-df69-000027e070f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4beb7ff-3484-2a79-0917-0000cdb3d743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b98769-6ad7-00e1-2182-0000750fb026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dad95e6-0807-3555-08e3-0000fd4848bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.104/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d850ba92-04f2-d592-80a9-00007fa03e2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cb8f81-ae46-f1e3-95ec-0000a42cab85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.104/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab0d6d3-dc84-688e-0487-000067ba1fc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d48c92-4427-af03-2a7b-00001c69e8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.104/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735ce3f3-9d98-0d00-03d5-0000547a35a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--416a8171-8311-e3fe-b4b6-00002eba66c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c6ad43-d60d-10e6-edbe-0000ef04d336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95146b8a-20e1-e8c0-ef22-00008407bd7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c1175f-aed6-13c3-1069-00007a765a34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.104/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20572975-61e9-b4bc-f44c-00001705b489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mips","pattern":"[url:value = 'http://94.154.43.104/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6568de07-4267-5ccf-aa86-0000adeb52b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d0f300-f562-d273-42fb-00004d342586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0258c5-b31a-8472-0003-0000ff7ea7d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c3a7bd-b95e-8274-49e6-0000dadb913f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i686","pattern":"[url:value = 'http://94.154.43.104/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36337b13-fa9f-fcbe-6a88-0000990d999a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client","pattern":"[url:value = 'http://94.154.43.104/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48519e4-fc66-ed61-d699-00005c4fe391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i586","pattern":"[url:value = 'http://94.154.43.104/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cea9995-cbb2-2238-e1a4-0000eff205ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d6f7e5-2ec8-2234-1e61-00006f12578b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7b1da3-23df-df74-df77-000017f36253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.104/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4302595c-47f3-5a52-9a27-000014a71508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b0690b-0915-c713-3381-0000877dc9ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f39746-d42a-f054-fcc0-00009ad50b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5871b030-3cdf-09f0-2e13-000013da4f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f652238b-ff6c-2640-f876-000022daf680","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9409f0c4-1a31-65c9-2b72-00000fb022bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d75efc2-25c8-5940-bb04-00009fd46d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c56941-2f74-79db-3799-0000da1f4470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad58ce-f0d3-ada2-2713-0000b542f645","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cc38fb-63c1-5bc8-7d60-0000c8aaeb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a8b81c-732e-20ca-03de-0000155b1066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2952994e-8fd9-d7ac-6946-0000ab94e4c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14279c19-712f-31d7-becd-00009f7fad38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d317d826-82e3-5787-c455-00000284b5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0ce967-90c6-5bb3-dcbe-00003fe49c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121baa4-c336-87b0-df22-00007844e69f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9f2607-fa3a-7cc8-00dc-000052575e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83a8be5-8f82-44d6-c926-00004524cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a34877-8944-6739-cede-0000d2b70c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999b8515-2844-da49-5d5a-0000cfb2026e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab46aef-a97b-044d-80ba-000005d626f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client","pattern":"[url:value = 'http://silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--501a1008-d9b9-04f7-5db7-00004dc5ff6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9328effd-e22c-c169-bbde-0000a539e267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fd9f72-7ab1-3140-820f-000096d6e150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c7de0c-dc68-806c-7841-0000e7d70328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd80a9df-13f0-049d-e847-0000e0deb3de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15953c5b-c94e-b65e-d20a-000067099ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b312d1-e75d-c60d-a5e0-000052a1888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5babfdac-c37b-a7e5-bd58-0000c4020461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb086d-df7d-3874-6162-000070168cfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7761d418-874f-bc38-7081-000039a2e6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a38806-be9a-97f5-4009-00004c7ed91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa39dd2-cf2b-fc94-bda6-0000f14ba2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1575c9-1a03-677c-1341-0000559d8176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ac9d09-6112-63d3-90a0-0000e0286504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b142717-36cc-0483-0b9d-00002d009668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e1b56-1297-3eb2-c26d-0000b9a2a026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b712f954-0fbd-7b0a-ce29-0000a904e8c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c410d6a0-9bfc-7f82-2d9c-0000e7db6af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd6b576-7c16-49f9-989f-000052087c9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5487d4-2c0f-877a-9eb2-00006632431c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2daa434a-31b1-f87f-a01b-0000642c1ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a88a202-f7c1-48e3-27cf-000088a044d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c11409-8287-5261-a7d7-0000396a5b52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf00c0c-0a64-f7e5-868c-0000ec640181","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454b155-6208-a05b-e4c0-00000fd9a335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1479d417-df2a-460c-4d5d-0000219239cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6186779c-2dc8-26be-95da-000064dacd7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb865-2802-b336-7606-0000d1c4a7ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb03eb39-9d93-9835-56d4-0000fb4fe0c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6704cab-ca5c-fa1c-fccd-00002d9286dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264fb695-3048-dd1d-bca6-00005b526aac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d6a0a2-d188-d5fe-3757-0000ef3d0729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a2e76e-a5b7-f0d7-3027-00009fd80482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8aad0cc-c19d-e5c0-7db9-0000dbf8a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a53f41-5320-b8c8-eaf5-00007b4cdf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f95db6-fcfe-3361-60ca-0000fed1ae6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf00539-539d-4a02-b01b-00001f069d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4962d3a-9854-6ca9-d63f-0000e4cc49c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d62e556-3615-c8a1-06f3-00001cf2107c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9455560-cac4-6f87-b7e0-00007ddb9269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd1dba8-e840-3615-2fed-0000b005b7df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fdef7e-c0b6-7901-da24-0000b0f36105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c861ac-c376-9e7f-ec2d-0000cd4df1ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5fe6d20-bef7-c145-f67a-0000466dc90a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a4fa06-d3c8-ecc9-6651-0000cf1357f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f9bb2ab-3e23-6e4a-c51a-0000907571c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d72946-8eee-9ed5-c773-0000dc906cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651fa3e6-5bfb-97ce-8db6-0000513b0b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda603e9-b6bf-dc16-be0a-000046ddfb22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ca3b1c-5198-6591-dad9-0000a649db18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4c44bd-8c9d-61c5-059c-0000d28faf8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f59120d-c31e-c817-f183-000096ed4fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4f62f7-60d3-2635-ecad-0000f55575f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65accc9b-c933-2d5a-51c5-0000bd1f655b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e01642-c3f0-a9f9-1e7d-00003bfa4b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2c8509-38dc-e24d-ff73-00008f8b7ef3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4a8d24-fc13-f987-c7d5-0000d316e581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.172.218.181:39713/bin.sh","pattern":"[url:value = 'http://45.172.218.181:39713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119e49c7-6e3d-d31b-0818-0000569a8f75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d3d1b1-4b5a-1c13-c01b-0000b713a61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9300db62-43fc-569c-e9c0-0000dde946a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603ad34d-02da-dc88-b083-0000e02d1433","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b26f3d9-5770-ea15-d025-00009bb27c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df3243-89d7-1395-c5e9-00007db6ed60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b244d1-c174-1474-5ecc-0000c9474269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5cc92a-f1ac-91ad-b56e-0000b949f70d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4161b5ce-b2b0-d52c-b3c8-0000cc40f596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ce0158-31eb-a9b8-d79f-0000f31ee467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43270b97-4ce6-8b4c-f822-00004ad48738","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ecc116-1d0f-3e46-14b0-00009780d2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f2956f-4384-2804-3fb4-0000e87824b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f63a9-ef9a-3454-8024-0000da693623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46203eaa-9ecb-a0b5-1c4f-00005a32a6eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1254f1a-39b5-d080-835c-0000d922e444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5404da31-af87-09d5-d419-0000ad6523d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8fa79-d9e5-20c1-5d6e-00009908347a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3dc71b-1bd7-85ad-420d-000038d60428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e790075-6fad-ad40-0466-00008f952693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7713577f-aba7-bc8a-5c0c-0000da9fe0f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46c7d55-7cb2-d2b5-33f9-0000409483e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3f58a2-0e2b-56d4-bfeb-0000ea8e360f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384810c-c426-9b9d-6a92-00003521526a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16266d3-09a9-92d6-ec23-0000eba20253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09599b0-d3bb-06a4-94b1-000011ceede6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573394cf-44b4-7e6c-9cb2-0000c478ba8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d09419-f8a9-8ad7-5bc1-0000747f409c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1673941f-3185-0b91-4ad2-00003f2dce6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccac274b-ebcf-5f82-6d1b-00008d1c7ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.32:52224/i","pattern":"[url:value = 'http://110.37.39.32:52224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36b4dc3-82cc-76fb-7d46-0000f828e48c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c191b6-bad4-b18e-f6b0-0000b19c8eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a187d9b7-409e-51d4-60f4-00001741c54f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69614fd6-2e2d-6f85-43ef-000030260e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fc9bb0-fa09-d46e-5750-00001796561f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79ad6547-b1a2-9a1f-fcf8-0000314e9e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--332fb43c-184a-a985-d52f-0000f27f0f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58dc9cbe-aa5c-a7ac-54bb-00006927cd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b18661-cda4-d23a-f259-00006cdc58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458121cf-1e40-9eba-dbd9-000078a532c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e315df59-5f68-3203-5cce-0000fc666d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9fea74-d55d-03e5-5b7b-000063af10ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8214e19c-ceaa-a0d2-a952-00005dc01268","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e00396-6498-60ca-c52a-000086cf30a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d76b1b-45d3-2b4f-afbe-00007abbfc51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client","pattern":"[url:value = 'http://windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7e675e-ede9-1b15-ab0b-00000f55e705","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d9486a-ef7e-cbbf-bc03-00007699a452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5607440-f3c4-0000-0337-0000820d1571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19813ad-8a77-5fac-24fa-0000baedd1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6133a637-0cc3-83e9-8a0a-000092dfcca3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d827c773-f8bb-5456-9eba-00008370679d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd0af66-6585-7712-2880-0000176080c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a152d6-81d7-44ef-21e9-0000542ea027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2030dd9-7947-7a50-725f-00005a896444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db7972f-b1ab-8bb3-196a-0000ac627efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd80e85-f2a3-c5c5-2277-00000503ebd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3291981-d0ca-7108-45d8-0000cd3305de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a34c61e-95ec-c73b-338d-00005eda4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1e591d-3132-16d2-ebfc-000071feae58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99fb189-4dcd-c17a-8fae-000087fc7454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00de78fc-1d97-7fba-1ca1-0000ce25c337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932ff75f-02db-dc95-22a1-000063ba6693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4440a4a1-53b2-0b7a-1d4b-0000907b4ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3bd0384-0a75-a4fd-5251-00008cb76ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16011778-8d94-dc9a-b9eb-0000dc10c850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87a263f-bc97-998f-6a49-0000a84ffced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f967885d-fffb-6dcf-22ba-0000b09e1e0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c0198e-7723-f92b-794c-00001fb9181c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7983e1bf-0d8d-28a4-bbf2-000009a0eccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57e3d52-bcf0-7a9a-68e9-0000461bab40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b8617c-0998-7000-532d-000010c1b5cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2d23ae-288b-1a51-538f-0000dce61e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c764c439-331c-a630-40e9-00003a852c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff057521-4128-e526-7c26-0000efdb10ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c562bc-23ba-0f1b-27a3-000084f77d09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f22c635-41e0-3af2-d200-00009e165366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcc3b01-6abb-a013-f6db-00005bd44e21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b37dfc-c7e0-3f5d-06d8-000080512ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11995dd-0654-1b0a-22eb-0000197a35f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f161177e-d6b8-d576-7c12-0000952fd55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0bf05a-9460-003c-03ec-00001633d617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91681578-9e80-bb16-87b5-0000da4873a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ceb29-ddf3-84e5-efea-000027d32f70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08bb9c8-774b-a141-6b6a-000024a7cdbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c5b00b-511f-c710-844f-0000f7e8323c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7535dc1e-0465-69bc-9e7b-000099f08591","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7195ca-334b-7769-a8f1-0000437a69f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a65b41-158d-4be6-699a-0000e3d4203e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537cdcf0-79a1-7fb0-81b7-0000358c8129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823f4d76-1077-c733-6667-000057bb4dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19780ad2-4d3c-96d3-42f1-0000de4ab56d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b802a49c-2489-b83d-26f9-0000241a1c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d652cef-b501-58d8-cdfd-000052212c07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1536100-ec1a-fae5-17fd-00007af21fe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8d6600-ced9-f1c5-563a-000054d876fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cbd6a00-23df-8b84-a1ee-0000deb4098e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355453b6-43b0-2631-464a-0000c8355c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1128c10-e143-ec3d-459f-00008cdf4000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8ae020-158c-4ad5-5cd6-00009f289ae1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dff707f-0633-b598-9893-0000a9e6fc85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104d41b1-4a35-abf8-db26-0000d1e592f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3114dde-880c-776f-5e53-00005c064ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310e2dae-b143-4152-d0fc-0000e002421d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a91b165-5702-2d2f-152e-0000c0bc7064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf59f822-e5fb-86d4-24cb-0000016d550a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/bin.sh","pattern":"[url:value = 'http://110.38.210.180:55714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b64d1ed-8f37-a3da-0e35-000087b057c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--179039c3-ef11-932c-bab3-00009914735e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163496a1-1828-d47a-6162-00002a63abc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce016727-b447-25db-d772-000094cfd8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b10870-f01c-343c-ac0f-0000d438249a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--605be62d-cec2-08f0-8288-0000307e4c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9a3aa6c-d609-c5d4-24f4-0000ae8cd102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af8149d-fb60-2aa7-2453-00009c75c36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b1461e-9f3c-59ef-eb0a-0000f88ba06a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459455aa-1363-fc5a-0369-000010376311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c34839-f7fa-696f-ec1f-0000e501cd1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f80149-e4bb-5f17-ef65-00002140b8d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b3855f-9085-5559-d184-0000870aa28e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8b0882-b48c-dc5a-6a3f-0000a4745aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e6f69b-6a08-7376-1484-00000ebf13fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c776ce8-fe4c-bd1c-9069-000054ae04ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36aaa117-0ff5-301c-de86-00006c003733","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ecba558-3137-cc02-737a-0000491f692c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35815191-cfb7-d7f9-1d75-000031b848ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ba77f-042a-3935-4e18-00002d400a72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d996c74-4e74-cd1e-481e-0000e7158a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9146653b-420e-05d9-aa98-00005b7d3409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e7007-b17e-5600-5c96-0000c9b194b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cfdc7da-84fa-829b-a89c-000033df3a4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca07738-ac61-05a2-9807-000068a6bd43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54bbc8b-0f6e-6e29-91d8-0000b068c8d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67cc5690-a736-3e3d-8f88-000077568970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--440755b1-5d5e-60b4-d65b-00006942ed7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62364be9-8eed-c2d4-6c62-00008e72adb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db27d11-5c66-cf8e-b60d-0000566c59af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07623134-4e07-7851-6bbb-0000b2f50f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52be14e2-aa8f-1b39-5557-00005c6708ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2ae885-cdb7-1c5f-f18f-00005e942c9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22e5d79-6966-1e47-b131-00007c953855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00997a42-6309-bbe9-5435-0000db6ba69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2790dc4-3b1c-dbae-5ce1-0000fea7cc25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ec4823-d87f-99a7-f6e6-00005f61d619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.152.6:41032/i","pattern":"[url:value = 'http://119.116.152.6:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35775fc-c2f1-7655-e2d7-0000efef863d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e483b19a-7284-3cd4-229c-00008d9d350f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eb23c3-927f-b9c0-05a1-0000eeee2194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c515b9-e243-b330-4062-0000e2425079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/locopoco","pattern":"[url:value = 'http://178.16.54.109/locopoco']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fe1597-6270-dfac-0e6c-0000619ad231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efceaeb1-1160-40b5-7b95-00007cb2afb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7c32e1-1507-bee9-9f1f-0000e8959604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f960c521-f8f1-bdde-db2c-000036c62bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7914b491-59e9-3e9d-6283-000092d428d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a52b5c-8e8d-f33b-efde-0000411c3896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b2099e-e78e-fb54-2ac1-0000f756b9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f7273b-0713-6367-f4fd-000025549a42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba7fa87-0848-790d-a041-0000b6ed771c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i686","pattern":"[url:value = 'http://94.154.43.117/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6b9fb2-9e8a-e9f3-a66c-00001e1541c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e77d9d-82d0-d9b7-bb9a-0000a5421eff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a804cc6-70bd-1989-0bac-0000d0202cef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f51c61f7-8e28-dd99-2864-00002c1a26a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.117/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be313c9f-ecfb-e9a3-84bf-00002014c318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.65.199:56561/i","pattern":"[url:value = 'http://219.157.65.199:56561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448b4c2b-4f25-99ca-990d-0000e6c8b64a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d33744f-20cc-061b-e949-00007b3352aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mips","pattern":"[url:value = 'http://94.154.43.117/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6ad138-b9c9-aa8f-d1fb-0000eb4a8d44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce524d6-99e7-fd42-fca9-00005cfafb81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b726ca19-2ace-750a-2595-0000049967df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68027e64-d6d7-15c3-66ac-0000e41a136e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--511f4099-72d1-2b1f-5a32-00007bc58470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.117/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aabf3ce-6f9a-802c-20d3-000011d236e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d29395-d628-838e-c9ff-00003d1f55d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10a2499-cab9-00c6-7047-00001789cec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f3c0c7-cba9-269a-416f-00008fd8b123","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10b841d5-7a81-5e41-9c3d-000053ecf79f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.117/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319857b7-47d5-6425-9f7d-00003f497def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2735bb54-527e-d607-076c-0000ce4170b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dde5bb2-2d0c-031d-14ec-00000a8814a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.117/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4473f355-7d28-b8f5-11a5-0000689c3b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d9ae7c-f666-a891-e52f-000066162fbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b328be-f3e8-d9c7-f3e2-00003483dad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb595f4e-c7e4-0b77-3af6-0000a1e64d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b99452c-c9b5-e303-2d5d-0000c1fc6af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f2da7-096c-af20-e8c2-0000a3ba69be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0b05b9-5f4a-3b79-6c8a-0000d45cade2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e144de-3be0-7321-dfca-0000307905b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i586","pattern":"[url:value = 'http://94.154.43.117/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ac0e8f-b766-378d-fd5f-00005ffcdbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af803a59-4e21-46b5-3803-00005f0a0d67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6960a25b-6fc8-e86f-ba32-0000451c3ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a891060d-2d5d-98d4-c4a7-00002dfcd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cd6b46-c835-0180-2665-0000e3bdb85e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c87715-4a71-7497-9c0f-00001b5a8151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf7f17c-8696-ba2a-2802-000087e36312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.117/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced34654-d218-d00d-564f-0000263aa8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b571fa-2632-4edd-aa79-0000c10abc2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121ff32-bef0-819d-b7b4-00000cd4999d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0223041-65c7-5a68-b8a6-00008f08d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--260b2f52-d4cb-267d-1d24-00001e805eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177c2735-d930-b749-2961-000055a0edb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc30a6a-2c09-df13-9d41-000049b470d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267b733-5e4e-9885-94e3-0000aa09d261","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c32400c-d78c-f948-8f65-0000c5c2a253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b520ac8-4211-8d22-54f2-000014405a7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3faa800-f1fa-76f9-7b4b-0000cfc0688e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ca5bd0-d96f-d971-1826-00005b01df3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f6f6ab-0ff6-52b5-9ea3-00003763e62b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client","pattern":"[url:value = 'http://94.154.43.117/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a341ce6-2f85-2cef-290d-00009eda400e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841d78c6-a9a4-be22-b90a-0000e5b430ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/gpon","pattern":"[url:value = 'http://94.154.43.117/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6805912-f262-c0b4-830d-00006d15575b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549486b3-7fac-ffaa-5baa-0000a9d56d23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--decb494b-fe96-a52d-4edd-0000a5b4c825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89604d80-6d5c-bc11-9076-00001d260eb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d442a26-e44d-5a09-34b9-0000d66c36c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71194f25-2e70-b6cd-4d18-0000d97a3ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469f6721-7658-e821-3357-000087f51a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3497cac2-2f9d-8ec5-e040-000039233e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/bin.sh","pattern":"[url:value = 'http://89.165.130.43:46337/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c67617-6c68-8c48-3540-0000e67d49db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9fad7b-8b38-aac0-15f3-0000d7cb8e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/i","pattern":"[url:value = 'http://110.38.210.180:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d752ad2-ed16-80f1-b167-0000357fed76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/i","pattern":"[url:value = 'http://60.18.9.255:60894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8afd4d34-3549-9362-07fd-000051cfb781","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72cde8e9-9312-139d-c5a9-00002137691a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50270621-af7b-20bf-b6d1-00003ea97bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/gpon","pattern":"[url:value = 'http://94.154.43.125/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d456033-d090-4eb7-7ec5-0000b110c0b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587ca8c8-6d78-05f6-93ff-000054a789f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client","pattern":"[url:value = 'http://coralwebqe.help/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3199e370-4ef8-60a6-c9e0-00005c07a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mipsel","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbf7356-db69-7381-9a2f-0000c38b9338","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i686","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8c2a35-200e-fd4e-106e-00005db36109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/android.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae90360-36c8-5bf6-4eb7-00004e5a87db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cfff917-489c-a577-860f-00000563453e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_x86_64","pattern":"[url:value = 'http://coralwebqe.help/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a58f2256-e617-324d-d608-000046f2cf98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84164aa6-b513-2534-2ee7-0000d7c17626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/gpon","pattern":"[url:value = 'http://94.154.43.121/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f58bd-ef91-4313-f5f8-0000adf1a32b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65bd53f0-54f4-2609-967c-000065f4f7bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6239640-9e5b-6a47-79e7-000001909426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a9a6e2-8120-c6e7-305c-000009474173","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8410a486-b7f1-a76a-7531-0000c6124b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/gpon","pattern":"[url:value = 'http://94.154.43.133/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca9b336-c47a-e259-78d9-0000b4723ac7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c7f404-6ffb-7dd0-f063-000086af9e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/micro.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eecbbd-c422-fd9e-c15b-0000564ce9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b81437a-f1f9-54d1-77d6-0000ecfb0713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29bd4624-527a-1d66-f72e-0000d8c18c09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e480b3-76b9-1094-ff23-0000af8abbb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/gpon","pattern":"[url:value = 'http://94.154.43.110/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6750ad7d-466d-b764-6aec-0000d89d2d9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d91715-ace6-50bb-4528-00001417ca34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/gpon","pattern":"[url:value = 'http://coralwebqe.help/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dac7e1d0-6c03-f49b-16df-00003b9ae5fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/chunk.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2b9f0f-4dcd-58f6-5ae5-0000a54f6d2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be911558-562d-0709-fe6a-000026647fde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_powerpc","pattern":"[url:value = 'http://coralwebqe.help/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2607c948-3eae-2de5-8eff-00000ea36054","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_m68k","pattern":"[url:value = 'http://coralwebqe.help/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8673ec-753a-354e-27df-000054476076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5ef7e7-362c-c9e4-5a06-00008ff5887f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv7l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d56d10-b9eb-47e6-e792-0000cebad5bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf26bc68-98f1-32ca-0792-000028cfbbc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f25fa38-194f-dee1-4ce5-00007b592c99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff959c6-d410-e979-cb21-0000ce4c0366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6445c6a6-b0a9-a02d-5571-0000b295a1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv6l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f689565-9c2a-b3fd-5859-0000f535db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv5l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4297cbf6-f6b3-1346-0ca0-0000035a42ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496dd70e-bc88-441b-625e-0000039226d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef9cd0f-9c12-6fe1-5fe1-0000451fe196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i586","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c529a1-7418-f5f9-e6b1-00008384db1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa526f6-7e23-9b53-9426-0000205d9e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_sh4","pattern":"[url:value = 'http://coralwebqe.help/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c4ff81-c51b-3345-ed30-00001baccff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5673a424-c72d-d4ae-4cde-0000c855f2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv4l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc4ea55-a434-8719-4c6d-0000a699b441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9831169e-e1cc-601d-5a1d-00004ebd6521","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb2b70-32ea-ce18-81db-00008a44ba27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i686","pattern":"[url:value = 'http://94.154.43.133/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8668542-d1db-255a-399e-0000654db49b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99595684-3c78-92bf-fec5-0000ec1ce5e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a867f6b-1045-b715-85c0-00001c8822d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ae0b9d-5f5d-6fd7-f4b6-0000d3273991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.121/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b259fa-b6f3-3f3a-3ec8-000002338711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.121/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38767f3f-d9db-dd88-1bb8-0000ca80560b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05989fc-8447-8813-6e67-0000b05e05f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.46/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21705398-e0c6-1c2b-eabb-0000c6e5d36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8946d8f7-e9c8-7a8e-5030-000092a38bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba91abf1-bd8e-e368-07be-00008a8b9a03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.133/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2517ad-4dd2-424c-007d-00006b51db21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i686","pattern":"[url:value = 'http://94.154.43.125/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01df6c2-2fc7-614e-080d-000047bd2d92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a748e06f-ebaf-a970-fd47-00009184f35a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mips","pattern":"[url:value = 'http://94.154.43.129/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5d6c7a-85f1-aa54-9a92-00007182a127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c508427c-6c89-da18-5c65-0000650971ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf1bd96-911f-9682-b083-0000963993e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e987a5e5-6df8-6d26-9cb9-0000fbf30923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dc6ea7-4533-fdb7-e9fa-00005c5ad6ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i686","pattern":"[url:value = 'http://94.154.43.129/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cb7ef2-6a49-e83d-61b5-0000ff3cad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i586","pattern":"[url:value = 'http://94.154.43.121/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81e7c1f-aca3-8dbf-3792-00009a89aad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08b0718-7663-bf24-a57e-0000d3687bd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43407ebf-0e20-387d-8028-0000fd14e928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.100/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a1d353-9665-c08d-461c-00009148d052","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5265b3-0571-24c7-a913-0000ae81aac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv7l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347f3670-0e4f-9e1e-061a-0000e921d012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv4l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9902ab05-65d9-e4f7-0359-0000514083d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef36b43-1b9d-9452-d2d7-000024176783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88d0e404-6a94-41f7-d11f-00004fbe09c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be4150d-646d-c651-2cfc-00006c7c16c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i586","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c9bb4a-8f0a-9ce8-37be-00006cf2401f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1d7e2b-78e5-7baa-cac4-000012d4d4f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mips","pattern":"[url:value = 'http://94.154.43.110/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c48370d-453a-c585-9dc2-000014aebff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f389236-aa2a-96a0-a151-0000bfe58cd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.129/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c768d877-2918-839d-1398-0000af409dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2552a87-ebcc-61e6-6f9d-00006466211a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a2ab54-7831-240d-6b8e-0000eae8646d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i686","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d28a0b-a8b6-2033-0c28-0000519269af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6703fb9-4d7c-c45c-07c4-00003622dbf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010d78ee-905b-b8b5-5cd1-0000ce5d3746","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b30373e-0ada-c7b9-7da2-00006c5d1df7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6b5d3-0d05-e1ac-8c5c-0000ddbe9271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f38af1-4990-7e12-2894-0000a5a88fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f135e785-d662-7bc0-5d41-000054043d3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce1d834-48c3-0dfd-1106-000049f895a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c46f99-9b7c-80ee-72a6-000078d8b716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4187c606-3db6-7858-b782-00001e875f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3f88e2-fcfe-45c3-2d95-00001b2c7e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f45500cf-fef7-8af9-b145-00007584315c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db108aa-2f51-3bf2-76a3-000054269437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e03916e-f414-feef-7588-0000476c494b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.133/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eadedbd-f835-6f04-bd4d-00007a477a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f92ca9-47b9-f946-ccb5-0000df8f0237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/chunk.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2107724-ec84-84f3-582e-0000b6fb5465","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.110/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb70ba75-0b0d-e7c8-6e34-0000e863d8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb5591-b880-491b-421f-0000c3dd253f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d973f1-0960-2f13-756f-0000bb6d1cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebe4403-060f-e72d-4863-00004efcef23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.129/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f75e3c47-e379-2563-5c5b-00007e83db10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.133/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b76968-7372-28fe-dc68-0000538829be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd935e0e-7b57-182a-37fd-0000b3d6da3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280cd885-973a-3479-eef9-000053df9fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f63a9f4-bfdd-eeed-90a8-0000edc5a98f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i586","pattern":"[url:value = 'http://94.154.43.125/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a8e494-a3fb-746c-f89d-0000ec734874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb19965-0bee-10bf-8cc6-0000a68ffe97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mips","pattern":"[url:value = 'http://94.154.43.125/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe73fee-1f12-4fec-fa55-000031bae508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1fce746-b290-ca38-5570-000025556f31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.110/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae4b7e0-b9b9-29b0-3b8d-000051778b1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775737a8-d3ff-9594-14a7-000046152d62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cabb9772-8df5-4aaf-d64a-0000c1b08f83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cec521-190c-f8d8-5853-000007a8a567","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30bff93a-823b-07f6-7e26-0000432ad131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.46/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acb663b-5762-8e73-f810-0000e35998cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client","pattern":"[url:value = 'http://94.154.43.125/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd712dd-9e1a-a8e1-62dc-00001164d474","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1fcf74-a8d7-c278-79e8-000066e443fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd819e4-0453-159e-89c9-00004995ce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca720cad-3acf-32d7-a675-00003768d44b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client","pattern":"[url:value = 'http://94.154.43.121/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--971348ce-7afc-a25a-d3b1-0000d3597aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cb7384-ce9d-f2fb-860d-00001aeec747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/chunk.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65104c-38a5-7f56-8ee9-0000faecb6c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/gpon","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a2201-972a-a083-fe84-0000d9b8d16c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/android.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4669096-d873-6661-6ce9-0000d878cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--064954f2-e9fe-9676-3078-000093e18372","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv6l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76648a33-edbd-9453-8a13-000059e8cb91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94979ca0-abba-bbbf-62fd-00009e91dbab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6d4e12-5db6-1968-bb4b-0000b62d4d81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba62c52-edb8-33b1-e24a-00009dcad2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.125/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2bfd9e-aa83-cf3c-0665-00000e55b68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mips","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--973f6152-2afb-48cc-c893-000051cec83c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de4367-61c2-4357-d058-000003d17b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ff86a1-55da-07b1-5f15-00006c17a2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6550e20-2fc6-70bd-b116-000049b98b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9d8cc-1fe0-f6f3-75d4-0000e1432f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f8ec2c-babf-54d1-3e1b-0000848c3c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90216fc0-3a3b-167f-a296-0000cbd5b448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0194e63-d4ef-db88-90e4-0000b476fa2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mips","pattern":"[url:value = 'http://94.154.43.121/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4cb6650-6e4b-bbb9-d29a-0000a7dbbcf3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/micro.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df4d2d23-7c45-1b19-6519-0000e63ada0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--668dc0ab-e1d0-8aac-1076-000079a8df9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i686","pattern":"[url:value = 'http://94.154.43.121/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f1f0d57-c520-3f7d-bb0f-0000a5230eac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d214c38-c1ee-2a90-b3a7-0000ceabe19c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451f2a2b-1ee0-43da-5307-0000220d2d37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4e82f-b73f-0890-59ba-0000807b5aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mips","pattern":"[url:value = 'http://94.154.43.46/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0314afd-cd22-b015-3ee0-000012220228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.110/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0cdece2-79cc-d4d9-4703-0000490e437d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e34d1131-1d5d-8be7-2f3d-00008a6bd4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9707c8d0-8a2d-9951-7b35-0000e4b8b8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e76d8be-b588-a40b-c37d-0000cb310df4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i586","pattern":"[url:value = 'http://94.154.43.46/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe4e889-e978-3363-7dd8-00002b523acf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec7503a-2cba-db4c-d82c-000062312ff1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mips","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f58c27-1c58-501c-bba8-00009395c4cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_powerpc","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f68c903-c5df-3ebb-2614-0000af617ef5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--739ad0fe-7171-2403-99db-0000dacea442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i586","pattern":"[url:value = 'http://94.154.43.129/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79dadb3-4bdf-8053-d1c4-0000a679284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.125/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e997c74-18be-d785-77cf-0000add79806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client","pattern":"[url:value = 'http://94.154.43.46/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4d695d-7bca-d751-6edd-00002c401562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv4l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f7b196-b745-d9f3-e367-0000d3ef793d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.133/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c44668-62e7-fcf7-d78e-000088983144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d2d562-b05b-d372-1d06-00002bb7d87a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c1bc59-1801-3d5b-1180-0000330843cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a99b7c6-640d-2129-09a0-00004303bcc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5019fe54-87d2-0f47-247f-00007197a761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d507c94-5fa9-68ad-711e-0000e68d32b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d3caa5-2f4d-43a6-275f-0000050a66e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.100/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7b0bdf-cf47-980e-05d0-000056804602","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv6l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b973a1-044b-fe11-3184-00009a63531c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_sh4","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d1485e-1526-3df4-27d6-00005b2061fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da98bd78-a792-8ea2-a3c9-0000012bb71f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e34484-f1cd-0468-7c71-0000bf5ccff3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.121/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adcab5d-6eb7-89ad-5e1d-0000528403aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.100/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d17e9f-0a08-0df3-2c1d-000042510c31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_sh4","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee5e6612-be73-474e-efdb-000054a0828c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58e1dbc-4c12-1e97-4480-0000cd5e8034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.110/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84465de-c9a6-faca-23e5-00001a5a4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627549b6-fdb0-6e86-1e07-00003471b691","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2975f507-839c-f814-7182-0000b89dc349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fd9529-df95-1184-50a9-00000cd0c889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i586","pattern":"[url:value = 'http://94.154.43.133/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9071dfc0-1f05-f1cb-5969-0000447b4b04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client","pattern":"[url:value = 'http://94.154.43.129/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9ddbdd-8f7e-2f90-6908-00009d5510ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4465d3b-22ed-0ad0-78a9-00004ce28897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ffd9c8-b28a-f478-1da2-00001632137f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24aa39eb-3e2f-0f62-91e5-00006946bd87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c12f1a3-53a7-96ec-2f5b-0000d156076f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622fa5b8-002b-2cfd-14a3-0000479a9f91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mips","pattern":"[url:value = 'http://94.154.43.133/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d640731-142f-e2f4-d7e7-0000d441f9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv5l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5279645f-5918-f6c6-1b6c-0000bbde4b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7024fc1-d9ba-296b-090f-0000fdf48b98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--905de9b6-d1dd-5bfe-316e-0000afc3a270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37215890-4b9c-16de-0700-0000376e3a6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client","pattern":"[url:value = 'http://94.154.43.133/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c42c4c-7fb4-aba5-8a6f-000028ce5cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea906eb-e8fd-50ce-073f-0000a891c63b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/gpon","pattern":"[url:value = 'http://94.154.43.46/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f556581c-8475-8edf-0977-000011203cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv5l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d0f570-fd46-54d7-92a0-00004f9feaf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca733ce-0aa2-f3a3-1b04-0000d39ead03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb5c2f0-e1b6-1e4f-f1c4-00000375c42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf4a9b5-42a4-8606-062c-0000f2f6480a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2dcee2-8fbf-3282-906b-00004eb6e72a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i586","pattern":"[url:value = 'http://94.154.43.100/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2b133eb-a867-99f3-fa79-000019cc9c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87adfeba-643d-b112-6108-00001ee72d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c1346e-8fbd-a9ec-a031-0000e176a2f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169c5b69-c695-b1a2-b69c-00001386eee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--164b5d41-1079-b9c6-81e7-00006b35194e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.125/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a44408b-b74f-639c-d524-000098de7b39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91ad55a-15b7-f957-6cc0-000094702601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1560ab-8822-896d-e7a1-0000297b78e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i586","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cf4eba-5c6f-9dc0-94a7-0000599e83ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i586","pattern":"[url:value = 'http://94.154.43.110/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24b5f65e-eb4c-8945-3fe1-00006bb94708","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5c575f9-0b48-10fa-65d7-0000f725b688","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8853def2-4b78-ecef-ce82-0000afef0a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i686","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e906c783-576d-53f8-8686-00007add0422","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4948a67-f66f-3234-3ee9-00008fe0bf43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b2e1b4-ea0d-7a03-fb21-0000542b03f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48df2972-5fc0-fcf1-a308-0000f129a976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c02dbb-79c7-9ddb-e049-00008633cc83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.133/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8183dc1-5e10-07d0-8c3e-00001d9f69c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9707ddb-1ac4-0f32-e4e6-0000bf3ee901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a176e11b-46c8-0413-0e89-00001a061f3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cd64b1-7062-789d-3e92-0000d4aec1a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ba73b2-04e1-1163-62df-00001d0a1f9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffc48d9-f9b9-c433-bd29-0000fa853064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b75bf43-8c7a-dd08-a367-0000c5984168","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/gpon","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19a78ed-6267-51f7-dd35-0000a2708f58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.46/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b307ec77-d924-28a2-94f8-0000c967128b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb64d4b9-ca00-cca0-ef23-000091722580","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.129/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ddb644-b9bf-b169-efe0-0000c918c7c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53813e4-2bdd-9634-35da-00001370c46b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.100/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f705d5e9-63f8-a475-44d2-0000de606ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/gpon","pattern":"[url:value = 'http://94.154.43.129/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b2c6c8-4646-0339-3bd9-0000d305206d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c87e9f-3755-0611-13ea-0000263aa45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de891e5-7331-1579-2b5e-00009dd48669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe424bf0-1538-0b88-b5f5-0000caed80f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/gpon","pattern":"[url:value = 'http://94.154.43.100/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2659622a-e591-35e0-3f12-000084d066cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40323b1b-2a24-b34f-f2cc-00001060b7c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c688dcf9-ff67-64fe-c5b7-0000808d8c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.46/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa24b9-8335-115f-89ac-0000f9122b6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1e0fcd-8026-ba7b-845d-00001096611d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c0376a-c5c1-cd98-1e8b-0000ba556925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7603a9e-9dc9-68e5-6ed9-00006be06fb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv7l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952261bd-0397-14fa-8b91-00009076337a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6b70bb-49bb-1d04-1f75-0000c8229584","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i686","pattern":"[url:value = 'http://94.154.43.100/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba72e09-83c7-da79-3b30-0000b81241cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mipsel","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa1dbbb-54ac-87ae-7844-0000fe60db8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188751c-1cc8-4499-f01b-00005061995a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50903d0-9999-901b-c44e-00002b0e9b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef855ee3-da34-ede5-41e9-0000e6382ccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.121/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f36259c-f8a9-cf47-4cb7-0000273641db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mips","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2664d8-4f9c-5be1-a67a-0000a4700a16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.100/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944a21a7-6675-2a6f-cd22-000032d7b3b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3066e7-fc82-67ce-672e-00004da57f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i686","pattern":"[url:value = 'http://94.154.43.46/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc357ab5-50a8-f3e1-c023-0000b4802cf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.121/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc123291-b198-60e5-301f-0000166eb2ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ffdcba-4459-2c71-f04a-00003c305b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab5f91e-702d-ac49-d60f-00009cbbd699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--146c3b8d-41f1-6c1e-1f83-0000652d0f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6b0ef8-12c1-f638-738d-00000b42f247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c60277d-473b-897a-1b95-00003f286dbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9aeb4b-17fe-33ef-53ef-000025e977c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a89f0e3-0b64-99b1-4cab-0000df0af144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i686","pattern":"[url:value = 'http://94.154.43.110/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a33bd06-3a0a-f8fd-2a8a-00001e4088b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b50b8a9-cbe9-9874-272e-000065a8562e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f876a28-5688-07c0-8e80-00002ee6c757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f68a1185-2f5e-5881-74e7-00004d3cd51d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client","pattern":"[url:value = 'http://94.154.43.100/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d31a114a-ed47-6624-cc77-000027c09701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_m68k","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22b9440-8700-f20e-edd4-00003d7d7ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa24ffd5-af4e-da2e-2e80-0000d013ab7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cbe04ad-c529-fbd2-0085-00006d63d04e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986aeb1f-bba5-9eae-145e-0000f3e1031a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273af84-d8d6-e8b0-3318-0000f2d976c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd22037-26a4-ed62-74c9-0000280b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c9e423-a82c-4e38-daaa-000016d7f1ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b8b34-f295-ed5f-c71b-0000d503f110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a168b5ba-e3d0-640c-011e-0000e6648d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.125/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12eb64ec-fb67-eece-1ff1-000062c7f92b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_m68k","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab07e0f-d309-796e-a20e-000085f7e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604c13ab-0a95-03bf-052d-00003fdebb66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b85f0f3-b689-fe9d-74b3-0000ca9a1e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client","pattern":"[url:value = 'http://94.154.43.110/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--003ec575-890d-4d34-783a-0000d1a0d1b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8d5d9b-6bbf-ce0c-12db-0000992cce50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfc628a-f4f4-ae69-1342-0000fb146c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.46/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e0fdd2-9741-0a5a-7dde-00007b63d98d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0495bac6-f253-9b4c-9e38-0000ff1b8ea1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee2f1f7-dcc6-0577-36fc-0000075e73bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0eafdd-49b9-e871-c2d2-0000bf006e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.125/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf9397d-cd6c-0d28-1a48-000062ba7983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/micro.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41e69cb-061a-9795-9436-000027bcd166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bfffe73-3e91-6e00-a75b-000005fcb032","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mips","pattern":"[url:value = 'http://94.154.43.100/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f2e20d-6dbd-8878-8c12-0000c355d434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_powerpc","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6ddb89-0155-51a8-6017-00004b5d647f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf2ab51-c045-8bd9-7a95-00008748f700","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140508c-3cc3-459b-f018-0000d03ebbaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.129/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dabf2d0-b618-d0e1-bef0-00001e7189cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db30a501-a2fd-1e33-125e-0000001d5742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725e8851-abfa-a331-2c2d-0000e6816feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.129/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16165ced-ac0c-8683-583c-0000b796a142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9241f5cb-e81d-f5d6-5b80-0000019c5863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d250ad96-c179-3dfc-ab54-00007d2a126e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a4ecb9-4dce-6f4a-9c75-00001d895bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/android.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9afd21-a06a-cb95-b970-00007c318c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.110/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a1694d-1980-0136-e82a-000099da188a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d56315-f885-bfc1-e6f2-000056f23ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e245013-432a-842e-4ede-00006caee18c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--939cf57d-7595-9767-9d95-0000382d74a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.m68k","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc8db17-da68-a0ec-eced-00001a6ca606","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm7","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a156224b-0107-f3e2-2d47-0000ad0395cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.sh4","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b6f1d2-cede-6e0c-34c3-000055de624c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.x86","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c6ba3b-610c-6d73-9343-0000b0656e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm5","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a620762-c408-066f-400b-000053d8cc39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mpsl","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--481ad30f-fd5f-a500-c210-0000a85d6d7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32dfee23-881a-d3bf-a542-000018ecac02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e6822e-2117-5881-b1b3-0000867993d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d169c73b-1334-a501-ecc3-00006c9dd77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb73fec-d513-5a30-9bd1-000059556027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53957124-7565-5a26-299a-00007d7384bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mipsel","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd18f0f-b681-b4c1-430d-0000b2e56489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--493de951-f506-2456-4163-00004edc05d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcabab5-d281-fe0e-5f05-000052781414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb0c1ab-2747-e4bd-37a8-000038dba273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mips","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167570c1-eabc-838b-57dd-00006b4b458a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://mail.springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe5b275-7ab1-5d92-753a-0000a0df35b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a03c77-0193-458e-2ba6-000000ede179","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6da30c2c-1ae8-37cc-8272-0000264b4719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66ef7ad-f5d6-3ff2-1ace-0000d421b01e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6427e45-d9e1-4881-1b16-0000ab497e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.spc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d404c01c-701a-6bea-6cd7-00002ddd0c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.ppc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab75022-7950-cedb-b316-00002001ac41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d0d4aa-195f-db9b-65fb-0000431e4f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.97/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0511dd87-5da1-3997-ff88-00004e2ad30e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78f34b7-9895-fa11-c183-0000f24ac0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb65f925-9da2-53f0-118f-000032560e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f67a617-0efb-76a2-b334-0000c6941ff0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6e46de-30c1-5c2f-1cf9-00007f48f954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed300733-ea15-6316-2e51-0000bbc3b8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1de399-103b-74f2-df7e-000010e10a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6388723-49ac-19a4-b9b7-000092bd0ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/ohshit.sh","pattern":"[url:value = 'http://94.154.43.97/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6bf99-5aa7-c034-4696-00000a5903ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4485a165-6e9d-52b8-5295-000090a4b626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.97/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c488a4-61c1-ba2d-0f12-00004554a43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.spc","pattern":"[url:value = 'http://94.154.43.97/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08236fd-b121-65bb-53b0-0000c3c0d694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.97/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08e8b03f-1c27-23c2-4dc8-0000915523f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a995b3-0e39-ef2e-1eb8-0000905260fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425783bb-6b4d-6960-b1e2-0000d8dc5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb7666e-4ab0-72ea-9b6f-0000d09d49b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11382b5-e349-286a-62d9-0000bae8c293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6510a26a-3da2-e029-a26f-000030b0c532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/ohshit.sh","pattern":"[url:value = 'http://utensil.cleverpondky.com/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38120db9-6bea-6e3f-4228-000078ee8f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c31b4e-502f-2f31-2f09-00002529bd44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a749cdf3-d121-67e7-b4f0-000032a0d8b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd7b537a-cb1c-8475-41da-0000fb510eb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8796ce1b-29db-30ca-99b7-0000a810c509","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccfeb81-3b0b-46d1-e8c5-0000a2d0c163","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm6","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b7ff6c-8edb-c428-d1f1-0000739aac74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/i","pattern":"[url:value = 'http://89.165.130.43:46337/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f8a3c9-b885-ea31-50c6-00005c447d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/bin.sh","pattern":"[url:value = 'http://119.177.244.151:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2615abbc-3249-fb9b-cec7-0000181cc335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/i","pattern":"[url:value = 'http://119.177.244.151:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f2de20-c699-5b20-4896-00008033788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291fd51f-fc78-5d85-c0bc-0000924b9d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9723c34-20a4-398f-92e5-00001aec61a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/id/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/id/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bfa3188-ac56-0b2d-2fe2-00008065137d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/i","pattern":"[url:value = 'http://42.55.138.2:60455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eba55d-5a7d-4d07-bf51-000074ba8ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/l","pattern":"[url:value = 'http://94.154.43.88/l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27cc319-5f08-fef1-a337-00005ee56479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/arm7","pattern":"[url:value = 'http://94.154.43.88/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5301a540-ef11-3ddf-5224-0000209bb007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/i","pattern":"[url:value = 'http://31.173.12.38:48285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8965f1c1-8725-986f-9e41-00005464fc7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/a.sh","pattern":"[url:value = 'http://94.154.43.244/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b027bc5-b3c6-c264-22e6-000041d7d04f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/m68k","pattern":"[url:value = 'http://94.154.43.244/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be675c9b-604b-a389-aed3-0000c0e8f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc440","pattern":"[url:value = 'http://94.154.43.244/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3fc7f82-cbd3-c7fd-01da-00000a6b518d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i586","pattern":"[url:value = 'http://94.154.43.244/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bdb0b4-64b4-b883-f251-00006734725c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/x86_64","pattern":"[url:value = 'http://94.154.43.244/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b17eec-cfa9-2566-22ca-00005954bb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm","pattern":"[url:value = 'http://94.154.43.244/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddbf82e-f14b-444b-aaf9-00000bc14e30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc","pattern":"[url:value = 'http://94.154.43.244/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23e15b5-5c54-dc79-c04b-0000c1378228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i486","pattern":"[url:value = 'http://94.154.43.244/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35655af-4e83-aa63-dabf-0000639602e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm7","pattern":"[url:value = 'http://94.154.43.244/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bac1db-431b-0f86-7104-00008cff2323","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i686","pattern":"[url:value = 'http://94.154.43.244/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4516539-cd53-e8b2-7eb0-0000db2a6585","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm6","pattern":"[url:value = 'http://94.154.43.244/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--236c394a-07ec-9d81-2d06-0000c3fbed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/c.sh","pattern":"[url:value = 'http://94.154.43.244/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8891a79-5014-5017-62e1-00008b1fd7c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sh4","pattern":"[url:value = 'http://94.154.43.244/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172e4f13-258b-fc01-9167-000041210695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mips","pattern":"[url:value = 'http://94.154.43.244/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fc89da-063b-e15a-53e0-00002a2268df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mpsl","pattern":"[url:value = 'http://94.154.43.244/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d583483-50e2-65a9-b9b8-0000c99fca6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm5","pattern":"[url:value = 'http://94.154.43.244/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92a3b41-440a-84b9-4899-00006227845e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm6","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc8862c2-f6c0-8063-15ef-0000d2f5056b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/x86_64","pattern":"[url:value = 'http://oregano.brightleafrv.com/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94229183-a3e3-075a-878f-0000aa3f1a5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/m68k","pattern":"[url:value = 'http://load.dstat.top/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cdc95c4-ae67-0035-7246-0000e1839b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i586","pattern":"[url:value = 'http://load.dstat.top/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70236afb-1a2b-59fa-737d-000070922bb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm5","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f6c54f-b36e-17f3-e332-00006de3fb03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/sh4","pattern":"[url:value = 'http://load.dstat.top/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f40416-3d39-a56a-518e-00003261692b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c76bfe9-425e-1ab5-1695-0000887ec8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm7","pattern":"[url:value = 'http://load.dstat.top/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9a2b9d-4cc3-b745-471f-00006717e930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i686","pattern":"[url:value = 'http://load.dstat.top/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b718f7f-96f6-1eba-402e-000030c2af96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm6","pattern":"[url:value = 'http://load.dstat.top/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e278dec5-92b3-28cd-1833-000022770078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm5","pattern":"[url:value = 'http://load.dstat.top/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cc19fa3-b82a-1ae5-c1ca-000035f2c2f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i686","pattern":"[url:value = 'http://oregano.brightleafrv.com/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e8721fa-0593-7b69-80b5-0000b366b056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i586","pattern":"[url:value = 'http://oregano.brightleafrv.com/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff87d7a2-bb2f-27a1-8788-0000932f8904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mpsl","pattern":"[url:value = 'http://oregano.brightleafrv.com/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcc6083-5a2c-f4a7-e3f6-0000e02a05b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/sh4","pattern":"[url:value = 'http://oregano.brightleafrv.com/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ddc639c-b5b3-a4d0-2fa6-0000c1caa2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mpsl","pattern":"[url:value = 'http://load.dstat.top/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80ea555-060d-a743-07d8-0000aac9cc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mips","pattern":"[url:value = 'http://load.dstat.top/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41eafb9-6699-06fe-fd3b-0000ed691da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/a.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589b705e-5d9f-92f0-86a1-0000dab67576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc440","pattern":"[url:value = 'http://load.dstat.top/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a42718-e509-9b0b-6e12-0000ed3d62f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc","pattern":"[url:value = 'http://load.dstat.top/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5528eed-4576-3609-e95c-000075298395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc440","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1efff3-01b1-81e5-2646-00002adf483b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i486","pattern":"[url:value = 'http://load.dstat.top/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcea1da-2518-b29d-d461-0000bfa89798","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm","pattern":"[url:value = 'http://load.dstat.top/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2d0bd7-43fe-7629-6a2a-0000da9be33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm7","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067925bd-0379-309c-f7ab-0000f8da3194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/m68k","pattern":"[url:value = 'http://oregano.brightleafrv.com/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a55116b-307c-791f-f8c9-0000f82ce74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mips","pattern":"[url:value = 'http://oregano.brightleafrv.com/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f454bcd-f125-f714-7ca6-0000783a63f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i486","pattern":"[url:value = 'http://oregano.brightleafrv.com/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51419c71-a553-b97a-3848-00007d6af388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/x86_64","pattern":"[url:value = 'http://load.dstat.top/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9e82d4-979a-8d20-2a66-000060f49c46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46451b87-dfda-d5fa-0cfb-0000bf8c3668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/a.sh","pattern":"[url:value = 'http://load.dstat.top/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e176732-396b-9b0e-2d07-00007af60c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/c.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1392af96-cd9b-f71b-c391-00003a76d3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/bin.sh","pattern":"[url:value = 'http://42.224.169.34:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dde767f-7ac6-294e-537d-0000b3d54b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.m68k","pattern":"[url:value = 'http://217.60.195.187/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73445db-8449-9f78-4e20-0000d910d03d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arc","pattern":"[url:value = 'http://217.60.195.187/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928d6883-2c27-4b60-5b6a-00002928fed7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm6","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa05047-cdd2-c79d-5d26-0000edce20cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.spc","pattern":"[url:value = 'http://217.60.195.187/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4cd30c-11fe-a7ff-586e-000028132741","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/c.sh","pattern":"[url:value = 'http://load.dstat.top/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b554dfd0-d8ea-8dd0-6686-000013593c16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb40c49-640c-e387-85fa-0000eb84cb95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.sh4","pattern":"[url:value = 'http://217.60.195.187/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e6ee1e-373f-3ec9-a129-00006b5a5263","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.ppc","pattern":"[url:value = 'http://217.60.195.187/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508c68dc-57fc-6e94-75f8-000039cfa70e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f242a9-6ee3-df05-2bfa-0000b3239dc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mips","pattern":"[url:value = 'http://217.60.195.187/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84208460-59e3-6db9-9f4d-0000d820f38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mpsl","pattern":"[url:value = 'http://217.60.195.187/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14922831-a48c-0b46-0dd8-0000928396df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba6230a-7eff-86b0-4d56-000078fdb1bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7538f444-5f15-d41e-ead2-0000db37fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b843939-0056-b39a-3416-00003b9d5139","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm5","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58a5815-c45c-4ed3-6a82-0000919499b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm7","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56323696-fe24-ca8a-0eeb-00004c23414f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--547488cf-f3ef-dce2-9cf9-0000cab733e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc6065b-c7b8-ebb3-596a-0000b0c24470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c6b901-203f-ea7e-81e2-0000b2b45d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa9c491d-c9ba-bec4-b056-0000388a5e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21266a98-9887-4ee3-e3b9-00004a69aa17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ea328d-4731-9c4c-cd68-0000b03492aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1e0e0d-a82f-9835-1a86-00009822c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639518a7-23ee-4194-e3da-00002a3ff1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35cb9a5-5f48-dd7c-4ade-00007c1fd2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/bin.sh","pattern":"[url:value = 'http://162.255.251.91:50087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5072181-6dc7-615a-3800-0000067ab4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.66/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.66/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe0c950-015d-4f6c-99cf-000022f8e59a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.67/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.67/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0eeb34-076f-6086-d4ac-00008d260f0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.104/svchost.exe","pattern":"[url:value = 'http://217.60.241.104/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb6ef8e-db1c-c530-94c7-0000e4398ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.253.48:55721/i","pattern":"[url:value = 'http://182.121.253.48:55721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae77c91-57e8-5711-ab55-0000b543d6e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/i","pattern":"[url:value = 'http://162.255.251.91:50087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2310fb0-099d-b104-45a8-0000e76ea7f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://104.239.66.207/s.ps1","pattern":"[url:value = 'http://104.239.66.207/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a965669-b663-3a12-c419-000046fd79d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://baltos.online/asset/update.dat","pattern":"[url:value = 'http://baltos.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08890af3-26af-9d01-f1da-00002d7f5b21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/i","pattern":"[url:value = 'http://182.119.58.252:48725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1067a4a8-61a5-33b2-2e1e-00003aa0c470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/i","pattern":"[url:value = 'http://42.224.169.34:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58fb56-3d5c-a5f5-0727-00000ebff6e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/bin.sh","pattern":"[url:value = 'http://60.17.89.214:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0135ad7f-219b-21f5-bd55-0000e6c16c45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/bin.sh","pattern":"[url:value = 'http://42.228.252.188:39953/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa41377d-a7d0-2869-283d-000039836f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc","pattern":"[url:value = 'http://94.154.43.95/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52bd592-464e-4b7f-26a0-00005a12e1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mips","pattern":"[url:value = 'http://94.154.43.95/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a85a9e94-a946-4960-f381-00006a104a54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm4","pattern":"[url:value = 'http://94.154.43.95/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f13d52a-b7eb-2350-7718-0000b95df693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.sh4","pattern":"[url:value = 'http://94.154.43.95/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f306b3-0c36-9dba-64ec-000041800110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.x86","pattern":"[url:value = 'http://94.154.43.95/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5dae02-64f9-cf7f-41a8-0000d2ac2d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm5","pattern":"[url:value = 'http://94.154.43.95/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f9135b-d9bf-c85e-4b49-000031118f85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mpsl","pattern":"[url:value = 'http://94.154.43.95/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4654ffb8-d28b-ba38-ffd4-0000c01982df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm6","pattern":"[url:value = 'http://94.154.43.95/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a907e144-48d2-463b-245d-00005ae43715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.m68k","pattern":"[url:value = 'http://94.154.43.95/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3153cf2e-f95a-6c95-2017-000078a5e5ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm7","pattern":"[url:value = 'http://94.154.43.95/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303b8f34-92dd-2abf-7d16-0000da046572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i486","pattern":"[url:value = 'http://94.154.43.95/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c257dce-8a97-e80f-4069-0000bed22d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc440","pattern":"[url:value = 'http://94.154.43.95/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a213df-26a5-c58d-1784-00002b94b4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm5","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a52349-5a40-af7b-eaf5-00009328d3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ab4265-32ca-dd8d-4eda-000039211b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm6","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bf5b5a-ff8c-5d44-d66b-000097ccc479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i686","pattern":"[url:value = 'http://94.154.43.95/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd4684f-a81d-a68a-c652-0000a32a785a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mips","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce41f1b7-ce81-9d13-825e-0000381b0c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.sh4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f85c99-07a5-71dc-42bb-0000a3dcae80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.m68k","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f65a711-f95e-a528-d20b-0000350c332f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1313e0-ae1f-2c43-2721-0000b8c595f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de06ae86-eb8f-0d42-95e1-0000c8291610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mpsl","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd40e687-e833-a2f1-3845-00006ef45dec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i686","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d638752-80d0-4d84-ba8c-00003b378113","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc440","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec432e9-780e-11dd-b318-0000233cfce7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i486","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a1222e-95d7-e585-3171-0000c0c6fb8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.x86","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfac72f3-a6d0-589e-9b4f-0000819d7c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm7","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8e03f3-6dfd-ba87-849a-000062d97589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6fba96-5ed1-5183-cf50-0000cecfbbfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--490ad79d-7a40-d5df-ac1a-00002f11d482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16bc63d-5dd5-dfa2-bcc8-00009f05fba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036ac723-d04a-4e41-2988-0000e7a174db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c84bf2-a207-bc9e-c6ed-0000c4043e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6a87d5-a53d-5e8a-9a60-0000a69134c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dd8b58-174e-32f5-7c1e-0000b6ccd588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9464e6f9-8f0e-8cb2-1bb5-00000c98fc4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28f690f-cbbd-e33f-394e-000036124c7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650da99-a5f3-d1d7-4375-00001608ba26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48629787-bced-2ab2-ffbe-00008db0544a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d036b9ed-7030-9e99-138a-0000aff186e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1a8d3b-257a-aa1a-10e0-0000af07503f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a130bba-0205-2fb2-ee5c-00005bf5a647","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e363d66f-aa42-aa54-cee7-0000b4249b2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc05ba0-f68c-d8a6-3bbf-0000ef255efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6db743-807f-fa77-ece4-00001e2d53a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f3d823-b34e-d571-4687-0000a32851c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae129d69-1e9f-0def-b492-0000842630b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e23ea9bf-5e39-0ec5-604c-000084d0e66a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--788613a1-0e20-1d08-dbf5-000049f81506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66cf6ab-6cb5-e52a-5f6a-000027b99cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a13a74-60d7-3cda-7fad-000023f6c832","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b02c7cf-f0d2-e5aa-282c-00000430b40d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698787dc-15c9-dc4e-71de-000077fb919c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/i","pattern":"[url:value = 'http://60.17.89.214:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ecc9ed-8ecb-5e86-2aa6-0000e6c8c498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/bin.sh","pattern":"[url:value = 'http://123.11.12.92:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741b9a61-86fb-8447-f61b-0000bca84fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/bin.sh","pattern":"[url:value = 'http://125.41.9.22:56917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1811b448-4455-8d00-379b-0000514f19a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.236","pattern":"[ipv4-addr:value = '41.216.189.236']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d6aa69a-fe11-d0c8-d494-000011f8ea0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.92","pattern":"[ipv4-addr:value = '41.216.189.92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca582c07-600b-39f1-159c-0000d87a8351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 91.92.42.213","pattern":"[ipv4-addr:value = '91.92.42.213']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d7d582a-bc28-2db2-684b-00009d7a5c48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sysorbit.apk","pattern":"[url:value = 'http://94.154.43.244/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deefa78-808b-7b06-bdb0-00000775ba83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.202.198:40071/i","pattern":"[url:value = 'http://115.49.202.198:40071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1503ccc-ad4f-e3fd-e9ca-0000745b0230","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/i","pattern":"[url:value = 'http://123.11.12.92:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbaad3-9758-a16b-9d6b-00003e509162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mipsel","pattern":"[url:value = 'http://94.154.43.244/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89bfa20-64fd-c278-a24b-000045b5400d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d54145","pattern":"[url:value = 'http://5.182.210.174/d54145']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbc2810-d8f8-54c4-d157-000077dab7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef509d38-94a0-3f24-96c0-0000718a54ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arc","pattern":"[url:value = 'http://94.154.43.97/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fce526-85e7-8a25-12ae-00005fb4c6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab77eedb-46dd-d955-1518-00007b36a529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6b53f","pattern":"[url:value = 'http://5.182.210.174/d6b53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3d1b7b-c7f3-0d68-6dd0-00005d8c454a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.i686","pattern":"[url:value = 'http://94.154.43.97/bins/David.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a6b753-ed1d-2a8d-4629-00000ebdeb96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d6369","pattern":"[url:value = 'http://5.182.210.174/1d6369']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586d2727-da87-3b81-47d0-000020b2ba13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bae1f5","pattern":"[url:value = 'http://5.182.210.174/bae1f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2801fd-f15c-fa37-65ed-000065c43ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c5700","pattern":"[url:value = 'http://5.182.210.174/2c5700']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25230d6b-7ef9-1683-604e-0000a73d6e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c085b3","pattern":"[url:value = 'http://5.182.210.174/c085b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034d35a-3655-e6e8-9dd5-00001efc8cb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9a19b5","pattern":"[url:value = 'http://5.182.210.174/9a19b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec00727f-315e-4ba9-e13a-0000b6d2715b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b7ecfa","pattern":"[url:value = 'http://5.182.210.174/b7ecfa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba98bf1-be8b-f7df-b5ed-0000370d061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5d99","pattern":"[url:value = 'http://5.182.210.174/5b5d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09d59c0-a52d-9063-eab8-0000801edaca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/734ef2","pattern":"[url:value = 'http://5.182.210.174/734ef2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e75d3c-01c2-b3af-4300-0000e87c0d3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.97/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49190e27-3c5d-e597-cfab-0000339c90cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/607754","pattern":"[url:value = 'http://5.182.210.174/607754']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbfec5e-0d81-6157-0788-00003b4154d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6af350","pattern":"[url:value = 'http://5.182.210.174/6af350']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6c48fa-586e-c73b-1806-000030815b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mips","pattern":"[url:value = 'http://45.207.196.86/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b03ad97-0e1a-ddaa-3c07-00008e8a784e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsel","pattern":"[url:value = 'http://45.207.196.86/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedf8841-177e-2c98-d479-000060187f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv6l","pattern":"[url:value = 'http://45.207.196.86/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f0d419-d6fb-e677-edf7-0000bf682f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.aarch64","pattern":"[url:value = 'http://45.207.196.86/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b66a80-c5cc-e1cb-2405-0000a853cb2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.arc","pattern":"[url:value = 'http://45.207.196.86/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca362312-e10c-538c-ddf7-00009ac7d082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sh4","pattern":"[url:value = 'http://45.207.196.86/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a665b7f0-6721-153a-2f20-0000d7ee9b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.x86_64","pattern":"[url:value = 'http://45.207.196.86/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81407c2c-1c95-f588-4f0d-000030778dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.m68k","pattern":"[url:value = 'http://45.207.196.86/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece9eac3-e365-e2fb-8de7-00001ad82ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv4l","pattern":"[url:value = 'http://45.207.196.86/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2261d5-3b6b-9218-4c79-0000d6b2a9da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sparc","pattern":"[url:value = 'http://45.207.196.86/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c4b900-60a6-a486-d496-00005d785631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv7l","pattern":"[url:value = 'http://45.207.196.86/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f2db82-c4dc-6e96-9acd-000027b80551","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv5l","pattern":"[url:value = 'http://45.207.196.86/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--187c125c-af9a-d58c-2c9f-0000b097dfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.i486","pattern":"[url:value = 'http://45.207.196.86/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e790e-fbee-3c28-eeba-0000dcc3a7a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sparc","pattern":"[url:value = 'http://94.154.43.244/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b20953eb-8512-78fe-9e67-0000b98bcc6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arc","pattern":"[url:value = 'http://94.154.43.244/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8045f8cd-42a2-0d04-226d-0000b7d29e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.powerpc","pattern":"[url:value = 'http://45.207.196.86/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62dbd901-b99f-acdc-633f-0000b44f5af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/i","pattern":"[url:value = 'http://112.248.82.251:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e5c409-4b16-4887-c6eb-000084517acd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/telnet.sh","pattern":"[url:value = 'http://45.207.196.86/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f15af5-4f36-645c-eafa-0000cd978382","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.207.196.86/cat.sh","pattern":"[url:value = 'http://45.207.196.86/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71df967a-8450-7cc5-b892-00009c674a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsrouter","pattern":"[url:value = 'http://45.207.196.86/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc1c3d8e-2fa7-a7c3-0e46-000061346719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/i686","pattern":"[url:value = 'http://45.207.196.86/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540b2dfd-9f57-c976-800d-0000fe92261e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/spc","pattern":"[url:value = 'http://45.207.196.86/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fb2cc2-4664-eac3-5bd1-000075034788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/dbg","pattern":"[url:value = 'http://45.207.196.86/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dcfd6c-d38b-4d52-e526-00009bcc7686","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/i","pattern":"[url:value = 'http://125.41.9.22:56917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0337cd08-5a48-c057-c555-00003c8c1819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin","pattern":"[url:value = 'http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c95c9e-8ffb-61d6-04cb-0000f74db88e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.136.41:41095/bin.sh","pattern":"[url:value = 'http://59.96.136.41:41095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab9c112-7f3f-4a6c-d029-00008b88df5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d0ab28","pattern":"[url:value = 'http://5.182.210.174/d0ab28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db312c7-cdc7-2a44-680a-00004a0a57b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cd35f","pattern":"[url:value = 'http://5.182.210.174/3cd35f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2538ecee-8cc5-d6dd-b470-00008dc3bc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/552ff2","pattern":"[url:value = 'http://5.182.210.174/552ff2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664fd96a-853b-f9fe-f9b7-000007af2969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/xzOQ","pattern":"[url:value = 'http://129.121.114.124/xzOQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074691bb-d66b-9315-3b1a-0000ca980ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e78460","pattern":"[url:value = 'http://5.182.210.174/e78460']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c1586a-25f7-0678-ffc3-00002f372e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/475040","pattern":"[url:value = 'http://5.182.210.174/475040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5bf961-cabe-5ffc-5245-000084a4368c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5S4","pattern":"[url:value = 'http://129.121.114.124/5S4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea3305b-e2a4-16c6-fed9-0000040640b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Mxx","pattern":"[url:value = 'http://129.121.114.124/Mxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561b2aca-f1a1-b1c7-1dfc-00008d4053aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/096459","pattern":"[url:value = 'http://5.182.210.174/096459']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d5040e-5b6e-5b58-b1ae-00006c3d8bcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/TXA","pattern":"[url:value = 'http://129.121.114.124/TXA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2066d0-36bd-a01c-99d2-000071369cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Hxqh","pattern":"[url:value = 'http://129.121.114.124/Hxqh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43984f63-ed4b-5c20-e647-000037d27828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be3b0c","pattern":"[url:value = 'http://5.182.210.174/be3b0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6651a4-14e2-e4fb-8508-00002d7618f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/013767","pattern":"[url:value = 'http://5.182.210.174/013767']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1ce658-7b10-242b-a2bd-00008afc323e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8e9d9e","pattern":"[url:value = 'http://5.182.210.174/8e9d9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf5e905-bd91-88d7-6b39-0000b0d6c90f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2de858","pattern":"[url:value = 'http://5.182.210.174/2de858']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83939563-ab23-0ace-05d2-0000dbd78cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/77fda1","pattern":"[url:value = 'http://5.182.210.174/77fda1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b582aa-4eba-e6ff-60bb-000092272057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad49f7","pattern":"[url:value = 'http://5.182.210.174/ad49f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d665bcf9-2570-d593-a6c6-00003bcb7944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/actami.exe","pattern":"[url:value = 'http://95.164.53.193:5001/actami.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03061762-6d5f-0f25-4549-000053c57b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/uos.bin","pattern":"[url:value = 'http://95.164.53.193:5001/uos.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdfc086-86da-77b1-85fa-0000cc583a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/heras.exe","pattern":"[url:value = 'http://95.164.53.193:5001/heras.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20480018-a74e-cc61-87cc-00009e447ee4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/tris.exe","pattern":"[url:value = 'http://95.164.53.193:5001/tris.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca129c81-7699-b08b-f734-00003acc808d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf407ed6-4ee1-54b0-0dda-0000ba12197b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c2fec7-9526-3cfd-fe83-00009fc3aa20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b07e09-6870-3538-4922-0000817a9953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b66439e-8064-f5b8-b4b7-00007c7e0894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c03744-9794-8518-506f-0000888602d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7a0ad4f-ea0d-c2b6-b306-000042cfeef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85422d8-3de8-a2e6-476d-0000bc58f223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c0cd8-4676-3f98-1ee2-0000f43612b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8784b6c6-bbf3-1457-11e0-0000391ee1dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26f1224-0df7-0d2e-a4f9-00006ecba77a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19030031-8207-4653-aac7-000048d69baa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz.sh","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62da21fa-1cca-fa5d-058f-0000a6bc9de3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/debug","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5110380e-324e-1d59-5ebf-0000f4c0c46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856822b2-1a89-d0ca-9c17-0000d677c01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02781a43-a907-cb97-5bb6-0000685975e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bcb40a-62bc-90ce-b2bf-0000bb9f54e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/bin.sh","pattern":"[url:value = 'http://182.116.36.226:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4569682-4e58-3e63-516c-0000b3d453a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe","pattern":"[url:value = 'https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8067fc-941d-b113-3953-00008facb1f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mips","pattern":"[url:value = 'http://95.155.151.113/d/slim.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637e6cdd-e0d5-c857-70e8-00000fd29b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/i","pattern":"[url:value = 'http://182.116.36.226:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ea35a1-7cc3-7859-b4cc-0000ce22bb1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/gpon.sh","pattern":"[url:value = 'http://95.155.151.113/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e01741cf-f687-5935-e2d4-000004346fb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/single.exe","pattern":"[url:value = 'http://95.164.53.193:5001/single.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2b42231-69fe-64ca-328d-0000ba61fb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/lol.exe","pattern":"[url:value = 'http://95.164.53.193:5001/lol.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f079e3-4404-995e-5e2f-00001c921bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/term.exe","pattern":"[url:value = 'http://95.164.53.193:5001/term.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2baf9418-3184-e1a0-cb91-0000b507462a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4d9fd5-278e-b919-e4ed-000081801916","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/babust.exe","pattern":"[url:value = 'http://95.164.53.193:5001/babust.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc0af7b-f4fe-8385-ea7c-00001e29a0a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ntmyebewekca.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ntmyebewekca.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5cb21ac-e408-5d5d-d106-0000a43def94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/msis.exe","pattern":"[url:value = 'http://95.164.53.193:5001/msis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b01bb-c9f4-9fe1-3064-000088da9cbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/anfo.exe","pattern":"[url:value = 'http://95.164.53.193:5001/anfo.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d5286d4-4195-5e7f-bcb0-0000964ad70a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dt.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dt.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70488358-b7e5-8ae8-0333-0000fe7038fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/suza.exe","pattern":"[url:value = 'http://95.164.53.193:5001/suza.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cf350b-fe6a-a3c2-ef8e-000051c9b778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/jhgjse.exe","pattern":"[url:value = 'http://95.164.53.193:5001/jhgjse.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7c6a32-d2fa-a03b-1c5f-00001538ca66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/maya.exe","pattern":"[url:value = 'http://95.164.53.193:5001/maya.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21401676-bf87-c82f-1e96-0000ce4ea52a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/mina.exe","pattern":"[url:value = 'http://95.164.53.193:5001/mina.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64475be-a420-eed2-df92-0000184f9e48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ados.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ados.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4e14ce-3c87-1463-cad3-0000d08d45da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/adas.exe","pattern":"[url:value = 'http://95.164.53.193:5001/adas.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1852a135-1d8a-77e2-3633-0000e4afdfbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/slim.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f87d40-20e0-ce01-3804-0000ad1bb582","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm7","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--457827c0-1064-89a5-7e6d-0000e1c298c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/realtek.sh","pattern":"[url:value = 'http://95.155.151.113/realtek.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c089394-4796-aeb0-1505-00005adb04f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm64","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d6bf15-b278-3cb4-2c5d-0000e276e105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dit.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dit.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf216d0-f585-e152-5ef7-000036d45683","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/bin.sh","pattern":"[url:value = 'http://125.42.13.21:45097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52262f23-3a0e-53c9-e234-00000e6c00d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/i","pattern":"[url:value = 'http://125.44.219.81:55457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3941a9d-2345-4036-df74-000046f2c348","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/bin.sh","pattern":"[url:value = 'http://42.230.47.176:47866/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d356b42e-cc57-d85f-6a3f-0000c404b1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/bin.sh","pattern":"[url:value = 'http://115.56.169.46:45542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cad5293-4d34-9d99-3dce-00002bc9a388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/i","pattern":"[url:value = 'http://115.52.234.218:36909/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac355db3-e349-2dc2-a0f1-00006ac8e271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ClashRoyalV2.apk","pattern":"[url:value = 'http://64.89.163.215/bins/ClashRoyalV2.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790121e6-bf0d-81d1-95eb-0000a281ccb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mips","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad793b5a-78fb-d9fd-da75-00008036c8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm7","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7e0bcc-10e0-6d9a-54c2-0000388aafa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm6","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f401db77-54ce-c314-dbd6-0000b00317cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x86","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61beeba8-16b0-068c-9997-0000b24efdbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43775a76-66a7-0e05-f07d-00002a3f004e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm5","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--591a9d5b-3564-a917-c4db-0000ad12898b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mipsel","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848c97d5-9c47-beb9-1ea3-0000a53a6127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dafdd1e-9e82-93a7-00b2-00009031cef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/i","pattern":"[url:value = 'http://125.42.13.21:45097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7a6a587-0b53-2fab-d9b3-0000fcc9067d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/i","pattern":"[url:value = 'http://115.56.169.46:45542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20331d94-9878-451d-d8a9-00004ed058a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/bin.sh","pattern":"[url:value = 'http://123.4.234.31:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b839f6-c66f-3890-71e7-00008e01fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.194.16:48972/bin.sh","pattern":"[url:value = 'http://60.23.194.16:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2165dfeb-8120-cdbe-0692-00006ab936c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/bin.sh","pattern":"[url:value = 'http://182.119.196.19:60380/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ecfb8cf-280e-6ce1-1be7-000049426f4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/i","pattern":"[url:value = 'http://182.119.196.19:60380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--771da6c2-13da-6f74-43a1-0000fd067041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.234:60432/i","pattern":"[url:value = 'http://42.231.88.234:60432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f6032d-1b4e-a1ca-bc4e-0000bb1094c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/bin.sh","pattern":"[url:value = 'http://175.175.92.119:49061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cdf037-0a2f-46dd-2b5a-0000243be9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/bin.sh","pattern":"[url:value = 'http://123.5.157.40:59329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca51ecdc-d4ff-05fc-3e2d-00009e4254b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip","pattern":"[url:value = 'https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46a468e-0f81-6518-c935-000014991315","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/bin.sh","pattern":"[url:value = 'http://61.53.237.126:41063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91b676-c176-bc4c-79f3-0000919dfb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip","pattern":"[url:value = 'https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659acb1b-09d0-be3f-b653-0000dcd17d85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip","pattern":"[url:value = 'https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e0329c-1425-88d4-939a-00004d05b273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbc48f3-dc8d-3021-eb34-0000b983b2b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ad551-03a2-3cdb-3bd5-0000eef98858","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f12a9e90-e67c-d69e-58ad-00003d1c93ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5b7cf9-05de-684e-57c4-00003150b31c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip","pattern":"[url:value = 'https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4096a64d-dd0c-be03-68a0-00006d057663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/73/gooddaycomingforu.hta","pattern":"[url:value = 'http://204.44.69.222/73/gooddaycomingforu.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5a60c2-f219-59a7-ce29-0000881ed4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/i","pattern":"[url:value = 'http://123.5.157.40:59329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc5ba36-ef5b-2e90-f09b-000021b4ac9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/i","pattern":"[url:value = 'http://61.53.237.126:41063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562fd81d-f793-af82-c6b5-000002b80795","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/i","pattern":"[url:value = 'http://175.175.92.119:49061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1b3ba8-08af-85c4-ba52-000095ca6fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/bin.sh","pattern":"[url:value = 'http://115.55.197.125:40668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48233fac-f587-73aa-cffe-0000deadbaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/i","pattern":"[url:value = 'http://103.31.103.204:36161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a476915-8115-2ea0-7440-0000b21c20f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/bin.sh","pattern":"[url:value = 'http://120.28.139.121:34906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--982a1951-f47c-ecee-4672-0000d9b3617f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.97.94.72:56444/bin.sh","pattern":"[url:value = 'http://123.97.94.72:56444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2008528-aacd-7e26-1a48-000084dc3e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/bin.sh","pattern":"[url:value = 'http://120.84.213.5:42072/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5bfa0a7-af9e-9161-3287-0000dd981c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/bin.sh","pattern":"[url:value = 'http://219.155.223.157:48528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c8dc78-d1d8-251e-3730-000016a6bcde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/bin.sh","pattern":"[url:value = 'http://182.116.70.209:50318/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188523a-4e1a-311a-d5af-0000b664116d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/i","pattern":"[url:value = 'http://120.28.139.121:34906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79861c5a-f63a-3eea-5c20-000077f195f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/i","pattern":"[url:value = 'http://219.155.223.157:48528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd3630-d7c0-db57-a8a2-0000ecd1fe5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/bin.sh","pattern":"[url:value = 'http://112.248.82.251:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3717554-66a5-9cf2-a360-0000ea890f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/i","pattern":"[url:value = 'http://120.84.213.5:42072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7c302-1f50-9ee0-2419-000042203311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/i","pattern":"[url:value = 'http://123.12.79.182:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0f48ce-d8e4-c50d-fa43-0000c7582694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.209.189:46958/i","pattern":"[url:value = 'http://115.49.209.189:46958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec58e27-d823-e774-3c64-0000877a96af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/bin.sh","pattern":"[url:value = 'http://42.235.89.134:36799/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ecc302-26de-3ecc-77ef-0000be99bb8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.38.199:36695/i","pattern":"[url:value = 'http://105.224.38.199:36695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5bfc79-c81d-7c4a-97ad-0000ebe63062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/i","pattern":"[url:value = 'http://115.55.113.143:47041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4771ec2e-906a-afa0-7386-0000136cd349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/i","pattern":"[url:value = 'http://42.235.89.134:36799/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45dc5961-d465-f32c-ad24-0000597f9c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/bin.sh","pattern":"[url:value = 'http://175.151.82.88:52513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0f2b3d-9ee9-54cc-5087-00003e0ad33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/bin.sh","pattern":"[url:value = 'http://42.237.60.215:54523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2121b1-b82f-6a68-68d8-0000f01cd428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/bin.sh","pattern":"[url:value = 'http://115.52.234.218:36909/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2079433-0692-31e2-63a7-00005912c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/bin.sh","pattern":"[url:value = 'http://115.59.22.163:43214/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d940a605-4d3b-b49e-88e4-00007c3cdd63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.105:38525/i","pattern":"[url:value = 'http://163.142.95.105:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a19181-98d1-0b98-a4bf-0000dd0a1c3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/bin.sh","pattern":"[url:value = 'http://222.219.74.117:52755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9529f71-bb2f-f239-fc11-0000d2f9e10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/i","pattern":"[url:value = 'http://115.59.22.163:43214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb9076c-c9cf-7444-287d-00004847eaf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/i","pattern":"[url:value = 'http://103.160.130.178:50403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca7d5ef-368c-7d58-5562-0000e235d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/i","pattern":"[url:value = 'http://42.233.107.216:48024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3bc3d20-7a27-5223-eaec-00006404b494","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/i","pattern":"[url:value = 'http://123.129.131.159:42876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84898cff-80ac-88ae-99dc-000049bc9d04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5223853602/uDSthxb.exe","pattern":"[url:value = 'http://62.60.226.140/files/5223853602/uDSthxb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b481a43-2d71-815a-1c67-00004e804575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/1781548144/Ql0IJZ0.exe","pattern":"[url:value = 'http://62.60.226.140/files/1781548144/Ql0IJZ0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6ee341-ff11-feb2-620d-00005a774e06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/bin.sh","pattern":"[url:value = 'http://117.253.29.68:48477/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72bcc0df-13c1-54d5-b423-00007b8e1f38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/i","pattern":"[url:value = 'http://61.52.138.43:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54449a18-dd7a-df95-4b61-00001c5c502b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.193.250:53397/i","pattern":"[url:value = 'http://115.49.193.250:53397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c01272-9f07-9886-9b80-000040934b64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.8.86:51962/i","pattern":"[url:value = 'http://115.63.8.86:51962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27bb668-6a5a-f55b-1eb2-0000c7fa7e7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.189.22.51:43030/bin.sh","pattern":"[url:value = 'http://123.189.22.51:43030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0c3844-91cc-9f87-f154-00009dcc90a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/i","pattern":"[url:value = 'http://117.253.29.68:48477/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807d02a7-7f9e-1cc0-b7e4-000034c361c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/bin.sh","pattern":"[url:value = 'http://112.248.83.6:56719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f7c0ae-f1a6-6c11-75f2-0000cfb385e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/bin.sh","pattern":"[url:value = 'http://42.227.204.129:58208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845b34f5-af19-8d3e-0be4-000000ea8f9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/bbc","pattern":"[url:value = 'http://94.183.233.225/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23516972-04a5-8097-029f-00000b50483f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/i","pattern":"[url:value = 'http://112.248.83.6:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--412b8636-3892-c4f8-2364-000015f51a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_aarch64","pattern":"[url:value = 'http://94.183.233.225/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e80745-da5e-4528-4987-000063b7f60b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/bin.sh","pattern":"[url:value = 'http://110.39.231.36:48526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c39f21-6447-fa7a-c9ff-0000394d6c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/bin.sh","pattern":"[url:value = 'http://61.136.49.183:57439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94da5229-48e9-660a-6b75-00002d613c49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/i","pattern":"[url:value = 'http://27.217.3.109:54209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b7b231-1f6f-efde-51a1-0000522920e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/i","pattern":"[url:value = 'http://61.136.49.183:57439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab90e79e-adce-c06f-340a-0000e2cb2690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/i","pattern":"[url:value = 'http://110.39.231.36:48526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e350e8e0-941e-5e96-e911-0000a058bdfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/i","pattern":"[url:value = 'http://115.54.132.26:37475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b10d02a-5956-d255-360e-00005d2353c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/bin.sh","pattern":"[url:value = 'http://113.228.209.236:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c264aee-e6ab-ff0d-ebf5-00008f919a0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://triflackcom.com/main2.exe","pattern":"[url:value = 'http://triflackcom.com/main2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f40292-d2a8-7f70-baa8-000082077d8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/i","pattern":"[url:value = 'http://113.228.209.236:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feeaf12d-2c67-7229-70a9-0000899b4b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/i","pattern":"[url:value = 'http://77.236.74.65:45120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4e81b8-0114-73bf-9d7d-00008cc72f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/bin.sh","pattern":"[url:value = 'http://124.235.243.150:48322/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ac025c-50f3-5ffa-0d4d-00007c861f5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://212.164.115.235:53219/bin.sh","pattern":"[url:value = 'http://212.164.115.235:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0028fd38-30cd-844a-a059-00004aa9c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_hk","pattern":"[url:value = 'http://95.155.151.113/sensi_hk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14491048-a1b9-914c-dfbb-0000cf3d72a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.sh","pattern":"[url:value = 'http://95.155.151.113/unifi.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce8cc01-e0af-d36a-e523-00003c2add9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.aarch64","pattern":"[url:value = 'http://95.155.151.113/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce43bd3-d78d-d087-8682-0000e06c0702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.arm64","pattern":"[url:value = 'http://95.155.151.113/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3a6989-2f9a-898d-6efa-000068a16c91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tp","pattern":"[url:value = 'http://95.155.151.113/sensi_tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60226aab-1653-92e8-5284-00006b293586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/huawei.sh","pattern":"[url:value = 'http://95.155.151.113/huawei.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08ceeaf-6724-754d-a787-000002a14e5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm5","pattern":"[url:value = 'http://95.155.151.113/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ec2aa8-fda4-93bb-1eff-0000e5ca2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_av","pattern":"[url:value = 'http://95.155.151.113/sensi_av']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ead42f8-d790-2a92-edd0-00002589954a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/netgear.sh","pattern":"[url:value = 'http://95.155.151.113/netgear.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f488b86e-6bfc-f788-054e-000079408cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/hnap.sh","pattern":"[url:value = 'http://95.155.151.113/hnap.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34ef9f8-68db-65f2-1e55-00001bbb5176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi","pattern":"[url:value = 'http://95.155.151.113/sensi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49e2663-5c42-7c45-ce36-00006a8e0d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tbk","pattern":"[url:value = 'http://95.155.151.113/sensi_tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e327a6c-cf9a-c67d-f258-0000a8bcb788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm64","pattern":"[url:value = 'http://95.155.151.113/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf573955-1f03-8e0b-ce2c-0000658ae0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/bin.sh","pattern":"[url:value = 'http://77.236.74.65:45120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a259dc68-b126-35c0-6673-00008d88bcd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/bin.sh","pattern":"[url:value = 'http://105.225.133.213:37257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9088a77-abc5-3ce9-eee3-00006a7fc331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/i","pattern":"[url:value = 'http://222.138.119.216:49346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619a19a3-f10a-8926-9498-0000a49275b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/bin.sh","pattern":"[url:value = 'http://120.28.139.212:38655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53f4bab-6392-f6d5-5237-000084b04c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.10.252:39675/i","pattern":"[url:value = 'http://196.190.10.252:39675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a66bad-c47e-1433-a266-00009c6a3f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://39.80.60.21:60792/bin.sh","pattern":"[url:value = 'http://39.80.60.21:60792/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2609677-0d16-8705-2239-0000cf61775d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/bin.sh","pattern":"[url:value = 'http://110.138.134.69:46780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21ad689-6ac6-0a50-f2d6-00003092fee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.104.208:40454/i","pattern":"[url:value = 'http://182.127.104.208:40454/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f3508-e860-c923-b81b-0000f385ebfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/bin.sh","pattern":"[url:value = 'http://175.107.229.126:33054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc882bc1-51e0-838d-c5e9-0000f1084f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.10.48.253:40771/bin.sh","pattern":"[url:value = 'http://175.10.48.253:40771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8483f2c9-e6d5-1522-ade8-00003833b940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/i","pattern":"[url:value = 'http://110.138.134.69:46780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc22e234-c38f-7957-288b-00006e3cd8b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/bin.sh","pattern":"[url:value = 'http://42.233.107.216:48024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1604ede-57ca-4e4d-f163-000050295ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.34.254:59706/i","pattern":"[url:value = 'http://27.217.34.254:59706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12858d7-074b-a641-708f-00003b67195c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/bin.sh","pattern":"[url:value = 'http://61.53.147.92:47128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ea6af6-edb8-c13a-c201-00009af2c2c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/i","pattern":"[url:value = 'http://175.107.229.126:33054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81eb1ea8-f521-a5d9-d2ec-0000c0844dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/i","pattern":"[url:value = 'http://61.53.147.92:47128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9fac03-c9b8-c9f3-e5ca-00009432862a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d85233-a62f-7969-81f3-0000d2de7b22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/","pattern":"[url:value = 'https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691d398f-fc3a-023a-26a9-0000739df819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.183.61:57147/Mozi.a","pattern":"[url:value = 'http://115.55.183.61:57147/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664e8e6c-7fbc-2e2c-9c4d-000081dfaede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/bin.sh","pattern":"[url:value = 'http://196.189.98.110:53335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ceb504-2418-8df5-d980-000016115819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/bin.sh","pattern":"[url:value = 'http://42.230.33.248:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abdb35f7-d264-fdd2-ff1c-0000f7cde9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279be813-8833-cfea-3c88-00001b6c6b88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://www.mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff7d1fd-c694-3e0a-ef18-0000f2903663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/i","pattern":"[url:value = 'http://42.230.33.248:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8ea3eb-6e3d-f4c3-d648-0000deeb3b4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/i","pattern":"[url:value = 'http://196.189.98.110:53335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83786f08-b66b-7998-8e2f-000046de9af3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/bin.sh","pattern":"[url:value = 'http://203.101.187.19:52053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e9063f-6bfb-9f3f-8774-000054cd1a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/bin.sh","pattern":"[url:value = 'http://210.208.111.2:36838/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e08419b-10bd-261c-088e-0000e289e4c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/i","pattern":"[url:value = 'http://203.101.187.19:52053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa488ca-c3dd-3dea-33f6-00004aaf2325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/i","pattern":"[url:value = 'http://113.231.229.97:60941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77d492e-b221-7b4a-f7d0-0000c9aad74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/i","pattern":"[url:value = 'http://210.208.111.2:36838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fcb9ff-ed4f-d360-7e6a-0000cbe2daf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/i","pattern":"[url:value = 'http://221.15.226.18:57698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84445c7a-c296-e441-ed1b-0000caaf3f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/bin.sh","pattern":"[url:value = 'http://221.15.226.18:57698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e5a871-effc-e348-111a-000017fb670c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.21.60:54714/i","pattern":"[url:value = 'http://110.37.21.60:54714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0986c5e3-982c-afe7-1b97-0000ed842e40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.252.205:60751/i","pattern":"[url:value = 'http://182.114.252.205:60751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3472f654-e1b8-1f26-d27c-0000632e95dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/bin.sh","pattern":"[url:value = 'http://42.235.55.88:55713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3320e9-b032-31f0-2597-00007811eb0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/bin.sh","pattern":"[url:value = 'http://61.52.138.43:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b63806-e185-30a6-4d2f-0000c566938f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/bin.sh","pattern":"[url:value = 'http://115.55.113.143:47041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cadd4e8-90df-2ef6-5064-00001eb41ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/i","pattern":"[url:value = 'http://61.54.194.76:45113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e4d60f-484c-a301-2793-00008f2f4623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/bin.sh","pattern":"[url:value = 'http://125.43.116.242:47371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0230e65-744c-30ea-d564-0000868e1029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.236.232:44430/i","pattern":"[url:value = 'http://115.55.236.232:44430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab4dfc7-5209-8f0e-30d4-0000aa3a6b54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/bin.sh","pattern":"[url:value = 'http://110.136.13.79:50906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ec8634-f9dd-d930-b381-00001371997a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/bin.sh","pattern":"[url:value = 'http://110.36.11.225:51361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126f47e8-753b-3e23-20a9-000031b261af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/bin.sh","pattern":"[url:value = 'http://110.37.119.220:37643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b806b1c-40b9-1f33-3915-00008afb2edd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/i","pattern":"[url:value = 'http://125.43.116.242:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530f9a47-c5fa-a407-18e4-00009ab2a1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/i","pattern":"[url:value = 'http://42.235.55.88:55713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335bdbd0-61af-4986-275b-0000e78ae405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/i","pattern":"[url:value = 'http://110.136.13.79:50906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0d4bf25-2340-0bf1-12a6-0000281365cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/bin.sh","pattern":"[url:value = 'http://115.50.144.52:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6831bfed-1ab2-cf82-e478-000067cfb478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.89:36540/i","pattern":"[url:value = 'http://110.37.119.89:36540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b82a25a9-d87d-eb6f-d835-000011973ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.229.247.64:58197/bin.sh","pattern":"[url:value = 'http://42.229.247.64:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64002448-0ca6-30d8-3ea0-00007b177814","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/i","pattern":"[url:value = 'http://115.50.144.52:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9152f7f4-3692-2694-2860-00009823d991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/i","pattern":"[url:value = 'http://219.157.18.143:41104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0825a89-2f42-95ec-3ac0-0000597032a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/bin.sh","pattern":"[url:value = 'http://182.119.58.252:48725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b07602-4f48-bcad-e15e-000045f6fc48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/bin.sh","pattern":"[url:value = 'http://123.9.241.164:43002/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26a8879-14b0-92cf-e3d7-0000f16b8cb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/bin.sh","pattern":"[url:value = 'http://115.52.179.220:43157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cde4e69-c377-c21b-8114-0000bce128d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/i","pattern":"[url:value = 'http://123.8.17.147:53523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c117f0-1eec-a269-1496-0000a8524006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.190:43969/i","pattern":"[url:value = 'http://120.84.212.190:43969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec14fdc7-587f-8de5-6f81-0000db5e8e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/bin.sh","pattern":"[url:value = 'http://123.9.25.110:38551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95eb0f19-b9d0-010b-dd8b-000057c1fafb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.115.64:41484/i","pattern":"[url:value = 'http://219.156.115.64:41484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--019b08ff-440b-8210-f8f6-0000e5eab186","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.236.157.223:50944/i","pattern":"[url:value = 'http://113.236.157.223:50944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd77960e-ba9a-2e54-612d-00001792a11a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/i","pattern":"[url:value = 'http://42.230.24.112:44963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e4ce58-64be-265f-8164-000064c7e665","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/i","pattern":"[url:value = 'http://61.52.156.140:46601/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb57108-60ae-a772-0b52-0000774a1bfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/bin.sh","pattern":"[url:value = 'http://182.119.183.1:55955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471c0e38-cbc9-3bba-fee5-0000548c8000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/bin.sh","pattern":"[url:value = 'http://219.157.212.157:59656/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19525b0a-a455-bd37-fa58-000025cb7426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.69:54758/i","pattern":"[url:value = 'http://115.48.149.69:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bd83f3-b24a-b937-50f9-0000e68a8c2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/bin.sh","pattern":"[url:value = 'http://42.178.164.205:52529/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c5c57-6b28-e010-724b-00009f8a3326","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/bin.sh","pattern":"[url:value = 'http://39.74.52.248:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545a2b8-b254-77bf-8325-0000a5bc8137","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/i","pattern":"[url:value = 'http://39.74.52.248:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856f8e47-200b-258c-9d62-0000f9ae1762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/bin.sh","pattern":"[url:value = 'http://144.48.123.149:50607/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8941921b-4baa-7ad5-3d5f-0000a6a99028","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/bin.sh","pattern":"[url:value = 'http://113.239.96.147:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e82399e-a34d-2e07-3596-00000ec9bfdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/i","pattern":"[url:value = 'http://42.227.204.129:58208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bd3af35-45f9-e356-517c-0000e0934116","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.183.107:44703/i","pattern":"[url:value = 'http://222.140.183.107:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78cb039f-0606-68ea-f97d-000025a2f2e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/i","pattern":"[url:value = 'http://123.14.54.13:58614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef9c33-f40c-3dd7-5a08-00003f1a2416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/bin.sh","pattern":"[url:value = 'http://42.177.186.117:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf81cb3-065c-a719-6598-0000667f2249","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.149.49:57320/i","pattern":"[url:value = 'http://115.62.149.49:57320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6dda6fd-34c5-ddd5-03ce-0000495510cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/i","pattern":"[url:value = 'http://110.37.12.8:38162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f39dd229-0cff-f6ba-7921-0000fe5a7056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:48636/bin.sh","pattern":"[url:value = 'http://182.114.192.237:48636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b527979b-3118-956a-9f8c-00009e3abbbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/bin.sh","pattern":"[url:value = 'http://119.184.29.187:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea9e913-94ac-a341-e03d-0000caa00b00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:41202/i","pattern":"[url:value = 'http://110.37.58.92:41202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897c8ef4-b6f5-9b52-f432-0000ba0816f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/i","pattern":"[url:value = 'http://119.184.7.234:46382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6a17ae-6ddd-150f-92ac-00008f74393f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.99.250.225:49416/i","pattern":"[url:value = 'http://119.99.250.225:49416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb8d6f1-6ce0-863c-bd53-000052a80512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/bin.sh","pattern":"[url:value = 'http://125.43.0.79:34827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f395de7-e0d6-9b5f-ae33-000008cb28b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.249.68.67:57560/bin.sh","pattern":"[url:value = 'http://112.249.68.67:57560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00cbcc74-94f2-8562-53df-0000cc770658","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/i","pattern":"[url:value = 'http://115.55.9.151:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d377d0-281b-06a8-948f-0000065b1c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/bin.sh","pattern":"[url:value = 'http://222.137.213.31:48901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dcf7185-7f9a-7755-dd1d-00002e770b5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.242:35671/i","pattern":"[url:value = 'http://120.84.214.242:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646fdca9-16be-c13d-ea7d-0000d25fd5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.125:40164/i","pattern":"[url:value = 'http://120.84.214.125:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e40f14f-5c51-1de1-eccd-0000f4cb1e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/i","pattern":"[url:value = 'http://42.53.72.145:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf17a54e-4c26-ad4e-2335-0000ded128b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/bin.sh","pattern":"[url:value = 'http://117.24.218.134:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--258652c1-77bd-75f4-06fd-0000e84da03f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/i","pattern":"[url:value = 'http://115.55.29.170:41884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ab8c0e-b9e7-7529-6c0b-000028dac55a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/bin.sh","pattern":"[url:value = 'http://115.54.124.37:33179/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b523854e-6382-8561-23b1-00006ae1f8ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/i","pattern":"[url:value = 'http://182.116.113.119:44177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce14d5e-17f0-c602-71f8-0000008ea58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.228.235:44677/i","pattern":"[url:value = 'http://182.121.228.235:44677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--695ecf28-30a3-6974-0269-00000299e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/bin.sh","pattern":"[url:value = 'http://123.8.17.147:53523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eac8bf0-d6e2-1b23-9e77-000046a59813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/bin.sh","pattern":"[url:value = 'http://115.55.29.170:41884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7329dffa-be14-740d-64ac-00000837f267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/i","pattern":"[url:value = 'http://115.54.124.37:33179/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b5c8df-cd71-0623-0e84-0000ca8b2d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/i","pattern":"[url:value = 'http://117.24.218.134:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d6a9ac-e4bf-adac-ebce-000034619112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://179.108.89.220:43996/i","pattern":"[url:value = 'http://179.108.89.220:43996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c399cb0b-cf83-a44c-699a-000059fe8fe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/i","pattern":"[url:value = 'http://42.53.51.109:44329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2505f3bc-70f5-dc15-fba0-000077c9040e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/bin.sh","pattern":"[url:value = 'http://103.160.130.178:50403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--910ebfc4-ee4d-5bfc-c850-0000e635e4d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/bin.sh","pattern":"[url:value = 'http://119.184.7.234:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9540d428-8e9a-1808-2c7b-000051a013e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/i","pattern":"[url:value = 'http://42.178.164.205:52529/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--395825aa-7347-7e6b-4334-0000adda9400","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/bin.sh","pattern":"[url:value = 'http://222.134.172.2:44618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e01474-8309-7a76-a1cd-0000292ab0cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/bin.sh","pattern":"[url:value = 'http://125.47.244.3:55442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa44a6-42f6-dd4f-5e19-00008b95a4f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/i","pattern":"[url:value = 'http://125.43.0.79:34827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0463d5b8-de15-10a7-18dd-000017cfebba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/bin.sh","pattern":"[url:value = 'http://42.225.206.253:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba55477-23e7-2d67-647b-0000dda3f477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/bin.sh","pattern":"[url:value = 'http://115.55.9.151:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f737d6-5d0f-af13-6d15-0000ceaccba1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.85.6.186:59524/i","pattern":"[url:value = 'http://42.85.6.186:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ee43bf-0f91-64bf-f15f-0000a6922fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/i","pattern":"[url:value = 'http://123.9.241.164:43002/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e202ba-3818-dec2-4f8f-0000408ddf7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/i","pattern":"[url:value = 'http://182.112.39.204:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c505ec1-02ed-ca28-acd7-00002b48988b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/i","pattern":"[url:value = 'http://115.58.171.191:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10573983-dd21-fbbf-3cf3-0000ec8ea98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.126:36545/i","pattern":"[url:value = 'http://120.84.214.126:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c07905c-5907-15ca-f564-00007ef58def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/i","pattern":"[url:value = 'http://59.103.116.68:54641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fbdeee-1af8-1bd0-d9ab-000062de7b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/i","pattern":"[url:value = 'http://42.230.35.149:47141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66582c2f-255e-7f66-4dd4-00009be6f67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.239:50468/i","pattern":"[url:value = 'http://123.14.181.239:50468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ee9e09-01a1-ce2c-f206-000053d7165f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/bin.sh","pattern":"[url:value = 'http://194.28.62.99:10819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e297851-c429-7e9d-cde0-00003c5c6ac5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/i","pattern":"[url:value = 'http://42.224.197.152:60373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573a92ec-7120-a527-01ed-0000d1f55d17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.27:59432/i","pattern":"[url:value = 'http://163.142.95.27:59432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c878c17e-ae0e-781b-d4cd-000026261f3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/bin.sh","pattern":"[url:value = 'http://180.252.209.203:43259/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4e7d78-606d-330f-4520-0000a56117d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/bin.sh","pattern":"[url:value = 'http://42.224.197.152:60373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0d9152-e80c-62f6-e477-00008da5783d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/bin.sh","pattern":"[url:value = 'http://175.172.13.19:60669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824162b-d018-b3ae-4afb-0000e0f5bde1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.134.211:38080/i","pattern":"[url:value = 'http://42.227.134.211:38080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b87c0cb-ea0e-778f-b229-0000d1aafde9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/i","pattern":"[url:value = 'http://123.9.25.110:38551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5f750-2731-7991-b9b2-000013570a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/i","pattern":"[url:value = 'http://115.52.179.220:43157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0220546b-2bf3-9cdb-fa3b-0000554dd9f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://82.48.207.52:56706/i","pattern":"[url:value = 'http://82.48.207.52:56706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3471a5b-ab63-bd17-19bd-0000cc0aaad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/bin.sh","pattern":"[url:value = 'http://110.37.12.8:38162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d53d7ff-7d29-9583-95dc-000076f522f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/i","pattern":"[url:value = 'http://42.86.172.171:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac30105-909f-2af3-4f12-0000e9cb25e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/i","pattern":"[url:value = 'http://36.48.41.248:36948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d94156-c0d0-2ce5-49b3-00008a2a036e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/i","pattern":"[url:value = 'http://222.137.213.31:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cadaaa3c-4246-24e1-d3ce-0000ebe93639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/i","pattern":"[url:value = 'http://120.28.139.212:38655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae704fc3-a8b6-4850-790d-0000407b4fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/bin.sh","pattern":"[url:value = 'http://27.217.3.109:54209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c95d85-7b1d-be1c-c9e0-0000fe25c57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/bin.sh","pattern":"[url:value = 'http://42.53.72.145:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c952a5-d06b-ab75-6a32-000041f09ff6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/bin.sh","pattern":"[url:value = 'http://61.52.7.68:35582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e803e282-09a1-a044-5a42-0000e3864a7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/i","pattern":"[url:value = 'http://119.184.29.187:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cebd55f-65cd-0d4b-9006-0000580126d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/bin.sh","pattern":"[url:value = 'http://125.44.219.81:55457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25003732-7d9f-ca2a-bbf8-0000439ed441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/i","pattern":"[url:value = 'http://180.252.209.203:43259/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d507c9-56a1-2f5e-c736-0000d3f058d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/i","pattern":"[url:value = 'http://194.28.62.99:10819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7027cb1d-0bca-48ea-5fc4-00006d8cce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/i","pattern":"[url:value = 'http://36.69.80.149:33303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e77f790-8696-d501-fc01-00009cf96eb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.26.190:34325/i","pattern":"[url:value = 'http://182.127.26.190:34325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67108d42-3e55-fe2b-9d11-000014f2ea05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/i","pattern":"[url:value = 'http://182.124.41.91:59176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0c01b8-d22e-7514-d087-00002f9697f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/bin.sh","pattern":"[url:value = 'http://182.124.41.91:59176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd9729c0-b877-1f7b-aa50-00004ff44a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/bin.sh","pattern":"[url:value = 'http://36.69.80.149:33303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4843cea-ba5b-9718-517e-0000c9252eca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/i","pattern":"[url:value = 'http://42.178.26.93:60244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086b3802-c897-656d-9bf7-00003a0d95e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/bin.sh","pattern":"[url:value = 'http://182.116.113.119:44177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff044469-f99f-f8fe-8ff7-00002008fbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/i","pattern":"[url:value = 'http://175.148.29.181:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99766cf-e245-1635-3956-000033495efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/i","pattern":"[url:value = 'http://112.255.6.104:51842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3208225a-4601-de76-4e8a-00003c3420e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.121.138.211:6609/linux","pattern":"[url:value = 'http://47.121.138.211:6609/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c868df9-0a4d-8f30-1f03-0000c495cdee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.178.215:39984/i","pattern":"[url:value = 'http://182.121.178.215:39984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d671147-4f7b-0b14-9a34-000001ac094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/bin.sh","pattern":"[url:value = 'http://42.178.26.93:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0aa44dc-468f-411b-0712-0000d2f349ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/bin.sh","pattern":"[url:value = 'http://61.54.194.76:45113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db8c08f-6317-9b9b-9205-0000105ff5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.95.255.56:6610/linux","pattern":"[url:value = 'http://47.95.255.56:6610/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4b8422-ed03-55e4-4a8e-0000715e129d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/bin.sh","pattern":"[url:value = 'http://59.103.116.68:54641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15fa3dd-8915-7d09-4fce-00000fd94063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/bin.sh","pattern":"[url:value = 'http://78.178.118.193:47288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1dc53c1-1add-ccd7-98ec-00007ae82940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/i","pattern":"[url:value = 'http://110.37.119.220:37643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae719a5d-e937-ba1b-4f59-00003cbedbd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/i","pattern":"[url:value = 'http://78.178.118.193:47288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6956bf25-fed7-eb0f-0bd7-00002ba5877a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dfb9efa-d844-17cc-cf84-000089883f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/lkxstress.sh","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfdca956-57cc-a355-9867-00006ce78e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8e0829-0bc6-31b5-ebd2-000001331c62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d5f8ec-4b8e-3b69-3626-00007e5221d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d2c87a-bfbe-8d72-4900-0000c6ee46b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54c8c93-da15-4393-72f8-0000e37f993e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233e5c0e-fdfc-5cc3-2ce6-000029876774","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b986e610-a4cc-65b7-bad5-0000e4af9418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee9222-2b7f-0088-1295-0000cb7af049","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46edbb0-0811-6664-e6fc-0000f9eeebe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5aad2c6-8456-00f1-ec58-0000e45942c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a5c6093-d86e-56ea-b33e-00000c033525","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4078140f-72f4-a51c-7455-00008f5a2c88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13c39e7-5c90-4b63-af18-000079307217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf0d0ba-36f5-8405-419e-0000003a0986","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/bin.sh","pattern":"[url:value = 'http://175.149.65.165:37215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da404bc-21ea-8ef5-4368-00008de5e062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/lkxstress.sh","pattern":"[url:value = 'http://170.205.31.25/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee491a25-d599-b81f-2587-000075ddc2a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.i686","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38dd94ed-8972-2000-3ae6-0000b803e712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mips","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e6345-78b1-3859-6c7b-000010213f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba2bec7-8f08-5f08-52b5-000022088402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eae2ad7-f223-6c25-cb44-000022b524f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c835828-05c2-b6e6-fcfb-0000c4fb571c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca58e51-0771-1cf1-883e-00009ab4e367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02abef7d-04e6-33c3-8cf6-000030bd2bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017c8112-984b-8cb8-68fc-000090ffa6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0f5224-6121-77a3-6dc0-0000d3008958","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceb0dc-a245-6da7-caf0-0000e8fcc8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91607d0-396b-4a60-ee8b-0000c26a53c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f1a03b-b414-561a-b24a-0000b8f531c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f62dee95-6751-b53c-48fb-00008a8cbd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ccb890c-fa0d-dd8f-aba1-00001b9b84ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/bin.sh","pattern":"[url:value = 'http://210.208.110.221:38824/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a22e36-e2b2-b326-0e43-0000e74f17f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.61:48371/i","pattern":"[url:value = 'http://120.84.212.61:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922b9669-547c-f2a9-865e-000038d7614f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/i","pattern":"[url:value = 'http://175.149.65.165:37215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf93491-49dd-d9ac-d37b-000077ec2eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.30.11:33676/i","pattern":"[url:value = 'http://125.42.30.11:33676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a63f62b-50a1-570f-25da-000056339a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/i","pattern":"[url:value = 'http://210.208.110.221:38824/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f3076e-3148-e790-1fda-0000ddca96e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/bin.sh","pattern":"[url:value = 'http://61.54.205.42:41895/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e5cca2-8247-3fa1-f33b-000099a542ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.48.165:35638/i","pattern":"[url:value = 'http://182.116.48.165:35638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9f2981-0f0d-034a-2952-0000307725fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/i","pattern":"[url:value = 'http://61.54.205.42:41895/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebd6a855-be19-317d-3590-0000976fe81e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/bin.sh","pattern":"[url:value = 'http://42.226.237.118:47311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59efd8b3-d21d-9cef-19f1-00004a3ab540","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/i","pattern":"[url:value = 'http://42.226.237.118:47311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306715a3-54c6-9380-58ab-0000cb2bb448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/i","pattern":"[url:value = 'http://112.248.106.46:52448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a70bd27-5374-221c-1c06-0000c81ab438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9fe27c-44b3-b622-6b57-0000a565cbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip","pattern":"[url:value = 'https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7c42d6-714e-da7a-f8ec-0000e68e1cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/4E_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/4E_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd3eae0-1d3f-3575-db71-0000e6df0d19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar","pattern":"[url:value = 'https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4421b41f-01ae-7b24-d2d1-00002fccda45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Radium_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Radium_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a692c6c2-a14a-de90-6c0b-0000e5fc8586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd78c91-e5b9-6391-8e54-000087260752","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/krypton.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/krypton.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ec4ed0-25d6-2448-5c7c-0000beb9bc81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi","pattern":"[url:value = 'https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2251067f-7837-b8a3-72da-0000e1edac05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.148.24:8081/lol","pattern":"[url:value = 'http://176.65.148.24:8081/lol']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49820e7-7528-f05c-420c-0000338bbceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/bin.sh","pattern":"[url:value = 'http://175.167.254.183:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7aa20-df9f-e459-15d2-0000d061619b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:55129/bin.sh","pattern":"[url:value = 'http://118.232.137.101:55129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b2e10d-418b-d3dd-8a89-00009ea4c621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/bin.sh","pattern":"[url:value = 'http://36.48.41.248:36948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae02836b-cca1-c2fd-a3bf-00004e54cb65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/i","pattern":"[url:value = 'http://175.167.254.183:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0a7018-6eba-65b1-78d5-000029a92711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/bin.sh","pattern":"[url:value = 'http://121.231.139.26:36392/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--947e0b62-70ad-6b45-5d81-0000eb6cdf84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/bin.sh","pattern":"[url:value = 'http://112.255.6.104:51842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb034404-6465-23e3-813c-0000fe633622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/bin.sh","pattern":"[url:value = 'http://61.52.118.142:40829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622ba13a-bb5a-6e22-c5a9-0000c62a5162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/i","pattern":"[url:value = 'http://61.52.118.142:40829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b158945e-d884-fe03-4941-0000e2c9d07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/bin.sh","pattern":"[url:value = 'http://42.230.24.112:44963/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2169560e-1775-6cc4-98d2-000026674bab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/bin.sh","pattern":"[url:value = 'http://115.55.150.155:57147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797f53ae-62cd-4f0c-2418-000076bc5787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/i","pattern":"[url:value = 'http://115.55.150.155:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9a690a-a930-5413-7ec9-00005d046a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/bin.sh","pattern":"[url:value = 'http://111.127.232.172:44915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd84a120-2cc7-e205-ecd4-000091f2c902","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/bin.sh","pattern":"[url:value = 'http://210.208.111.36:51347/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1949b58-88e9-f83f-afb3-0000f30e3eeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/i","pattern":"[url:value = 'http://123.13.106.196:55036/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95cbe069-f9d9-153d-4796-0000e1b85d40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/bin.sh","pattern":"[url:value = 'http://115.197.132.72:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e32b50-8204-f9aa-79dd-0000d7b92571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/i","pattern":"[url:value = 'http://210.208.111.36:51347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4349cd-8662-070a-dfb7-0000a36fa4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/bin.sh","pattern":"[url:value = 'http://123.12.230.16:46574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8884ef9-8662-f023-73de-0000c3fa64d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/i","pattern":"[url:value = 'http://123.12.230.16:46574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca07ec6-9db1-7d2d-b90f-0000063e58a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/i","pattern":"[url:value = 'http://123.10.145.33:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d4d40-73c0-e4fc-72b0-0000ef8ff416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/i","pattern":"[url:value = 'http://110.36.11.225:51361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ff112f-7587-ff07-f047-0000b9bc884d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mipsel","pattern":"[url:value = 'http://109.248.160.75/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a25a51-65b9-4ae6-14a5-0000e1847613","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d510662-d201-ff5a-3c4d-0000f5139c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mips","pattern":"[url:value = 'http://109.248.160.75/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45b34be-f772-02ba-cf34-00007c25edeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/bbc","pattern":"[url:value = 'http://109.248.160.75/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27277df2-f0f6-a22c-3cdc-00007dad50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm5","pattern":"[url:value = 'http://109.248.160.75/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e990b48-5dfc-7a59-d7b0-0000e0d86b73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86_64","pattern":"[url:value = 'http://109.248.160.75/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2e2c48-d217-ba26-2982-00006f18ff09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm6","pattern":"[url:value = 'http://109.248.160.75/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9291cde-45be-6004-f9e2-0000d7a4986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm7","pattern":"[url:value = 'http://109.248.160.75/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8e9f6e-15ab-bfdb-cf44-00004ae69bb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86","pattern":"[url:value = 'http://109.248.160.75/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1162131b-8d2f-e87b-d97e-0000265648c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_aarch64","pattern":"[url:value = 'http://109.248.160.75/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d73fcf-147a-9b5c-9f7d-00002eecf9dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_powerpc","pattern":"[url:value = 'http://109.248.160.75/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50204d64-5590-01b0-2b53-0000c5113782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm4","pattern":"[url:value = 'http://109.248.160.75/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9270af4-3592-e411-e350-0000195ec3fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/i","pattern":"[url:value = 'http://111.127.232.172:44915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460a383-21b8-50f3-60ef-0000df9d6e31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/i","pattern":"[url:value = 'http://130.12.209.147:55609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71aad826-abb2-6977-b810-0000b7547a6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/bin.sh","pattern":"[url:value = 'http://123.12.244.28:44252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--052d0565-0094-b886-59a6-000082c2e450","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/bin.sh","pattern":"[url:value = 'http://222.140.176.80:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4203f1a-8fc2-4dc4-b269-000086776938","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/i","pattern":"[url:value = 'http://42.235.79.41:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90c2296-ce79-cf2e-66a5-0000a3ec8b2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://143.246.195.33:48973/systemdd","pattern":"[url:value = 'https://143.246.195.33:48973/systemdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7e6e2c-13b5-756e-05db-000089e2e017","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/i","pattern":"[url:value = 'http://222.140.176.80:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b464da6d-950f-7000-f024-0000857195bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/i","pattern":"[url:value = 'http://123.12.244.28:44252/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd50d46-91ac-2942-2f9c-0000c376ece6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/bin.sh","pattern":"[url:value = 'http://221.15.186.19:46271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551cdc2c-ebbd-8373-c98c-0000fcad2c23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/i","pattern":"[url:value = 'http://221.15.186.19:46271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6d4d8c-5799-aebc-8edd-00006a8d8b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/i","pattern":"[url:value = 'http://175.151.82.88:52513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e0cf2-68b2-643f-d3b6-00004489e1bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.152.237:50318/i","pattern":"[url:value = 'http://115.55.152.237:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4293f644-8ab8-19b4-94a1-0000a805e435","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/bin.sh","pattern":"[url:value = 'http://123.5.150.18:40732/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a29db3-a4a7-988c-8e7c-0000cf5933fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/bin.sh","pattern":"[url:value = 'http://103.31.103.204:36161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f13b653-58a2-b217-9de2-0000acad9db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.46:39695/bin.sh","pattern":"[url:value = 'http://39.90.145.46:39695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10452def-c0d2-7e49-bdbb-000070543dd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.91.33:34772/i","pattern":"[url:value = 'http://110.36.91.33:34772/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf5f310-ec8a-0538-44e5-00001a16520f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/i","pattern":"[url:value = 'http://105.225.133.213:37257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b728e10-826e-3fe8-0e01-0000f35b4310","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.11:59440/i","pattern":"[url:value = 'http://61.52.217.11:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e8db8-c53e-dc50-4287-00001b1c40a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/bin/support.client.exe","pattern":"[url:value = 'https://37.77.150.120/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a1aa40-92ad-ebd5-952c-000071d50f17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/update.ps1","pattern":"[url:value = 'http://45.141.119.82/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e74e0c-5231-9ed0-df5b-0000adf8a91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/setup.exe","pattern":"[url:value = 'http://45.141.119.82/setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b2f821-408b-660e-0141-000034f3d02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--069f13f2-83a1-d36e-38fc-000043692d51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/bin.sh","pattern":"[url:value = 'http://113.221.9.116:54492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e34963-b32b-3d41-c6b8-0000a65f7791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/i","pattern":"[url:value = 'http://113.221.9.116:54492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc62826e-d755-47d2-0cc5-00001c365985","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/bin.sh","pattern":"[url:value = 'http://36.69.66.139:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9537c747-35d8-8bb8-0c78-0000bda53af8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/i","pattern":"[url:value = 'http://61.53.220.232:55420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc43fc3-5509-3c69-7c41-0000a34841ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/i","pattern":"[url:value = 'http://115.62.148.107:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55dca9cb-892b-7f30-ba17-0000992ca505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/bin.sh","pattern":"[url:value = 'http://42.239.150.240:43603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9393a05-fa4b-259d-4482-00008811d18d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/bin.sh","pattern":"[url:value = 'http://103.249.199.3:49338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0ddfff-e161-0027-cb8a-000032ffd4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/i","pattern":"[url:value = 'http://103.249.199.3:49338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6909ddf9-136a-8718-f5c8-000003290e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/i","pattern":"[url:value = 'http://36.69.66.139:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9efd1d8-7c5d-9332-ba1c-0000df7a2a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/bin.sh","pattern":"[url:value = 'http://123.188.44.167:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263ab5be-aec3-91cd-2a1e-0000640815dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/i","pattern":"[url:value = 'http://123.188.44.167:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740f7a7b-d8d2-b5ba-e537-0000e9bd4e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/bin.sh","pattern":"[url:value = 'http://110.39.230.1:53552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1059c34-ddd5-b625-9090-00007a8a399a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/i","pattern":"[url:value = 'http://110.39.230.1:53552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42173fdd-ed07-fb6e-de08-0000aa2a4c74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/i","pattern":"[url:value = 'http://110.37.43.119:55539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a90b20-6ed9-5fbb-5163-000080c5c101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/i","pattern":"[url:value = 'http://42.239.150.240:43603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59723473-bec5-0305-61e2-0000a7e07019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.192.190:48972/i","pattern":"[url:value = 'http://60.23.192.190:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2335cd-f18a-1134-89db-00006d57f3e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/bin.sh","pattern":"[url:value = 'http://115.55.218.67:53176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e093e97f-7fc6-00f6-ef1f-00004d61e078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/bin.sh","pattern":"[url:value = 'http://115.202.187.105:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f10dbf-3c13-286f-fef3-0000456040e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87bb5810-ac74-e89a-1789-0000c6815b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/bin.sh","pattern":"[url:value = 'http://182.121.9.194:56154/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abfa63f-8001-f967-5dda-000078c252fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/bin.sh","pattern":"[url:value = 'http://110.37.61.166:59222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4b0e7c-d287-9384-bac7-0000d6106183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/i","pattern":"[url:value = 'http://110.37.61.166:59222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4275fa48-9b6a-3b9d-2f93-000044c31510","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/i","pattern":"[url:value = 'http://182.121.9.194:56154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47493451-5362-3a39-c55b-00002d220bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/bin.sh","pattern":"[url:value = 'http://203.101.187.5:58359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a7581-a272-0d4f-7316-0000f61921b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/i","pattern":"[url:value = 'http://203.101.187.5:58359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ce6c9b-f1c4-32d2-de05-0000b0a4d947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/i","pattern":"[url:value = 'http://115.202.187.105:58599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27fa877-1943-21e2-8ae5-000003ac6195","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.26.181:34146/bin.sh","pattern":"[url:value = 'http://175.175.26.181:34146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d9628c7-d547-dc64-1be1-000024a75dbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm6","pattern":"[url:value = 'http://85.11.167.197/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1889e20a-1986-0bcd-aa4d-000001cd6a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mipsel","pattern":"[url:value = 'http://85.11.167.197/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c420f58-e0fc-b15f-8a93-0000899306e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/ppc","pattern":"[url:value = 'http://85.11.167.197/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a911851-b045-f78d-ae62-00009c1b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm7","pattern":"[url:value = 'http://85.11.167.197/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c5363b-90b0-83d3-90ba-0000be5ae877","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/m68k","pattern":"[url:value = 'http://85.11.167.197/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee902ed-b3f0-3e52-5e31-0000beac3ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mips","pattern":"[url:value = 'http://85.11.167.197/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4910ed0f-cb6e-2239-ca8c-0000094d9f1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/sh4","pattern":"[url:value = 'http://85.11.167.197/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39849eb-17b9-ce9f-8b87-00008eae9536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm4","pattern":"[url:value = 'http://85.11.167.197/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8c9c29-b785-3597-b801-0000fa1032b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pm68k","pattern":"[url:value = 'http://194.26.192.173/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b71cc0f-7e44-c691-865e-0000bf67dbf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/px86","pattern":"[url:value = 'http://194.26.192.173/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84df82d5-f65a-20d6-e93e-000060ed877d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm6","pattern":"[url:value = 'http://194.26.192.173/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea97b03-fe06-d08b-1bc1-000095f140e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm","pattern":"[url:value = 'http://194.26.192.173/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8b243-f089-c260-483c-0000d851e018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm7","pattern":"[url:value = 'http://194.26.192.173/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4233a2-7948-c960-37de-0000423389c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/x86_64","pattern":"[url:value = 'http://194.26.192.173/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92726e36-3ca3-da57-344a-000091e58a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pmpsl","pattern":"[url:value = 'http://194.26.192.173/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4854398-fadc-6e8b-2160-000041f0c72b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pspc","pattern":"[url:value = 'http://194.26.192.173/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3911f96-2e1e-10cc-4c1d-000047ba2c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/psh4","pattern":"[url:value = 'http://194.26.192.173/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9745f3bc-8720-3452-0ed5-00000115452c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/i","pattern":"[url:value = 'http://115.55.218.67:53176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71020d31-0c27-c4b9-e0ee-00008a7fd519","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/bin.sh","pattern":"[url:value = 'http://110.36.25.33:45137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc98e404-e244-7a7e-eb8e-000037b9c010","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/i","pattern":"[url:value = 'http://110.36.25.33:45137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3de9b7-ca53-4fad-db51-0000e3b3a970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:40215/i","pattern":"[url:value = 'http://120.28.193.113:40215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d5f4d9-25df-0aad-d31a-0000f047498a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.187.39.131:39653/i","pattern":"[url:value = 'http://2.187.39.131:39653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08f569b-6327-51a6-8632-000094d6766c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/i","pattern":"[url:value = 'http://42.230.41.97:51870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18510372-c958-65b7-0ad0-00009442cb29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/bin.sh","pattern":"[url:value = 'http://36.69.86.82:33719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955fd729-c9aa-0160-3e4b-0000f64727e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.7.221.147:56994/i","pattern":"[url:value = 'http://123.7.221.147:56994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83550919-41be-ee8d-a6f4-00002d42c3e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/bin.sh","pattern":"[url:value = 'http://42.235.79.41:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21240cf-2f7d-8a51-9e92-00006d45aa4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/i","pattern":"[url:value = 'http://123.12.234.37:36560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e0bbe6-8074-4e4b-b9e8-0000fe227ca7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/i","pattern":"[url:value = 'http://36.69.86.82:33719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e322413-aa00-dce3-b3a7-0000d329e8df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/bin.sh","pattern":"[url:value = 'http://103.146.110.122:34125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6adfcceb-c229-b602-5de3-000020e22d82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/bin.sh","pattern":"[url:value = 'http://112.238.178.200:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60ae0b-6033-017e-5f9f-000085155a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/i","pattern":"[url:value = 'http://112.238.178.200:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c281c-d416-ac2a-edb2-0000f8139c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.98.147.69:54271/bin.sh","pattern":"[url:value = 'http://115.98.147.69:54271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521512f5-a34a-b631-bc99-0000525060ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/i","pattern":"[url:value = 'http://103.146.110.122:34125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d155dcb3-ad92-e737-f439-000005e22a5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7061144442/nxumfOe.exe","pattern":"[url:value = 'http://62.60.226.140/files/7061144442/nxumfOe.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73297b44-2259-b781-6e91-00000d9c5890","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:45025/i","pattern":"[url:value = 'http://196.190.133.180:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c03ec0f-1554-2769-5a13-000094e8efc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/i","pattern":"[url:value = 'http://125.43.107.232:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0f6add-7647-a971-6e45-00007e8a7dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/bin.sh","pattern":"[url:value = 'http://175.165.87.184:46171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a62dbe5-a175-69a8-01ca-00009a2f4b1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/bin.sh","pattern":"[url:value = 'http://123.13.142.66:59668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd0cd72-7dcf-43c4-098b-00005b84825a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/i","pattern":"[url:value = 'http://219.157.202.104:39615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287971a6-abca-55af-768f-0000367ee57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/i","pattern":"[url:value = 'http://175.165.87.184:46171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b138978-7920-c742-89a0-0000c06b1ef1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/bin.sh","pattern":"[url:value = 'http://123.10.145.33:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f15e070-139e-efc2-9652-000093243ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/bin.sh","pattern":"[url:value = 'http://182.123.40.234:41791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--022fa51a-65ae-7ce0-4785-00009d6616ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/bin.sh","pattern":"[url:value = 'http://119.179.237.64:40459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83224bd-8c7f-9c8a-9b84-000000cf9873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/i","pattern":"[url:value = 'http://123.13.142.66:59668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66dcf73f-3c03-2b1b-8fe7-00000fd90ee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/bin.sh","pattern":"[url:value = 'http://222.140.161.119:54327/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae837782-ea57-d365-f463-00000208b745","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/i","pattern":"[url:value = 'http://123.14.193.241:34414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4f2eeb-1851-f7cd-7b96-0000bca52f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/bin.sh","pattern":"[url:value = 'http://123.13.106.196:55036/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e346e63f-3f68-a914-9579-00004cda572f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/bin.sh","pattern":"[url:value = 'http://219.157.202.104:39615/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dbed55e-bcdb-4ee0-93ff-000042c2e9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/bin.sh","pattern":"[url:value = 'http://110.36.13.229:41730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360d6703-76d2-3aaf-1200-0000a23d7a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/i","pattern":"[url:value = 'http://42.234.166.234:40751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37adc380-3663-13fb-e0a6-00005df305c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/i","pattern":"[url:value = 'http://119.179.237.64:40459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe3c6e-72bf-f3e2-3be6-00009fc90532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/i","pattern":"[url:value = 'http://110.36.13.229:41730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e5d3d1-2899-3913-5fd9-000002489a66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.252.196.44:41579/i","pattern":"[url:value = 'http://112.252.196.44:41579/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb35d5e-13c1-efe8-4880-0000cf298724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ea9eb6-7d98-5edb-d007-00009ab86b9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/bin.sh","pattern":"[url:value = 'http://36.71.24.56:48673/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0410252b-1451-07a6-6604-0000352a2c28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/bin.sh","pattern":"[url:value = 'http://182.113.206.76:59535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6083d4e8-1250-ebc0-a4ae-0000c2621657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/bin.sh","pattern":"[url:value = 'http://110.37.39.88:32921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58bf902-8e97-675d-9e16-000048e69129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/i","pattern":"[url:value = 'http://36.71.24.56:48673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d8dec4-2586-01c6-fe03-0000f563c9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/bin.sh","pattern":"[url:value = 'http://115.48.44.116:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b426959-68ae-59b9-ed78-0000bbf6a058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/i","pattern":"[url:value = 'http://182.113.206.76:59535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede9c7de-a9c9-19a1-c822-00002e0c462c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/bin.sh","pattern":"[url:value = 'http://110.36.70.189:53510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde65836-73d2-eaaf-0db7-0000ef9b4c20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/bin.sh","pattern":"[url:value = 'http://110.37.89.210:38147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a990e2-9118-ea99-225f-0000805bd085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/i","pattern":"[url:value = 'http://110.37.39.88:32921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fafa69-41d1-1b90-a958-0000004ba761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.181.201:51235/bin.sh","pattern":"[url:value = 'http://222.138.181.201:51235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a240dc8a-317c-2e04-eff9-0000438510d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/i","pattern":"[url:value = 'http://110.36.70.189:53510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12177447-5eec-8cf7-aebe-00004923e7cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/bin.sh","pattern":"[url:value = 'http://42.232.231.254:56762/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab9b57f-6d50-88cb-3929-000080d43b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/i","pattern":"[url:value = 'http://115.48.44.116:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7b8d1b-c400-e24d-0fff-0000adff4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/i","pattern":"[url:value = 'http://110.37.89.210:38147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719635a4-5010-752a-e505-0000915a44a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/i","pattern":"[url:value = 'http://42.235.75.164:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e33271-6d88-28e8-f47b-00007536a083","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/i","pattern":"[url:value = 'http://222.140.161.119:54327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aca6b0-76fb-9f97-98a4-000016154f30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/bin.sh","pattern":"[url:value = 'http://175.153.92.244:48563/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1530046-2470-116f-45c9-00007203b443","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/i","pattern":"[url:value = 'http://125.44.47.23:54371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9c0f0e-fc48-2e2c-ccbd-000080c9ab3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/bin.sh","pattern":"[url:value = 'http://182.117.165.9:33305/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14575b1e-25ca-5acc-733b-00004e8e8b08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/i","pattern":"[url:value = 'http://42.232.231.254:56762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacde5cb-3ed2-3ccd-ca20-0000af508511","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/bin.sh","pattern":"[url:value = 'http://61.53.220.232:55420/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3ee397-38fd-94ca-5eb0-0000b8185600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/i","pattern":"[url:value = 'http://175.153.92.244:48563/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f623911c-7018-9245-5137-00002b77d565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/i","pattern":"[url:value = 'http://39.77.172.60:34449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d06a61d-ee94-46ae-8698-0000f1b6cbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/bin.sh","pattern":"[url:value = 'http://42.232.100.206:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a50bfe6-aeb0-dc9e-f6dc-0000512f0a05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/i","pattern":"[url:value = 'http://42.232.100.206:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f21768-a042-a59e-42cf-0000e482c823","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/bin.sh","pattern":"[url:value = 'http://110.36.18.60:52528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a70d13-1325-c198-f80f-0000170a1044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips","pattern":"[url:value = 'http://160.191.242.92/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0384ccc6-cb4c-a27d-3ef4-0000ecce7024","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33104e87-1a7e-5151-c755-000063413a77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm7","pattern":"[url:value = 'http://160.191.242.92/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75fba481-a210-2975-5eac-0000f4856615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d57a165-c47b-04c3-df2a-0000f87905a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x64","pattern":"[url:value = 'http://160.191.242.92/x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--898b39c5-f1c8-5d4f-9aac-000017fcc69e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_m68k","pattern":"[url:value = 'http://160.191.242.92/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65d9bb92-df9d-f4b1-5d50-0000f2df3456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4734e723-1ee5-3aa6-de94-0000fef62cce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm5","pattern":"[url:value = 'http://160.191.242.92/pid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347a4868-8086-0cc5-ff7b-00003ac2822d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ae34c6-1c78-9653-63b5-0000eb10d270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86","pattern":"[url:value = 'http://160.191.242.92/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39859b9e-2b5a-0397-f6ec-00000c9cf413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm8","pattern":"[url:value = 'http://160.191.242.92/pid.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d8ece9-3a14-8f7d-753f-000028864804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.i686","pattern":"[url:value = 'http://160.191.242.92/skid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb6f522-1b15-1cf2-298f-00008476d47e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4eb","pattern":"[url:value = 'http://160.191.242.92/sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8134789d-cf1d-8365-24d3-0000c7ef69c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm7","pattern":"[url:value = 'http://160.191.242.92/skid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d82739-c911-557e-b053-00008d017354","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm6","pattern":"[url:value = 'http://160.191.242.92/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c4450-1a5a-3d98-85ca-000023b09da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.sh4","pattern":"[url:value = 'http://160.191.242.92/skid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff4350f-7bf4-c3ca-e42e-0000e7cbf6ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0660e55f-1270-25c2-e82e-0000fd2d4ad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c363fbf-a33a-20d0-339c-0000ad10433a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86_64","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--191c0508-d9da-2102-7f72-00009313bc05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_ppc","pattern":"[url:value = 'http://160.191.242.92/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fcc911e-90a7-c6c6-dfa3-00001846fe3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4eb","pattern":"[url:value = 'http://160.191.242.92/pid.sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070b8f95-6d63-38cd-093f-0000246762be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mpsl","pattern":"[url:value = 'http://160.191.242.92/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3562cef2-a63e-2a05-1d9a-0000b4f31891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sora.x86","pattern":"[url:value = 'http://160.191.242.92/sora.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a37bed-91bf-a772-b226-0000d6585492","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mips","pattern":"[url:value = 'http://160.191.242.92/vlxx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7a94cb-595f-ec4a-0d85-0000cc71ebfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.2.112:41839/i","pattern":"[url:value = 'http://123.13.2.112:41839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e128c6-5c9c-2a3a-3182-0000eb04d359","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/payload.xml","pattern":"[url:value = 'http://160.191.242.92/payload.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b1e016-904a-cd73-d9fe-00000ec5ea3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ipmiv2.xml","pattern":"[url:value = 'http://160.191.242.92/ipmiv2.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1c8d45-61da-8b95-8e88-0000180bb011","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ruck","pattern":"[url:value = 'http://160.191.242.92/ruck']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa82002-5f85-dabb-8f03-0000ba7b9e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/riscv64","pattern":"[url:value = 'http://160.191.242.92/riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622e6250-54a0-3ca5-be68-000013d76f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/spc","pattern":"[url:value = 'http://160.191.242.92/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6127b-234e-e7d6-f5d8-0000bb96c586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.i686","pattern":"[url:value = 'http://160.191.242.92/pid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74db6151-bca1-aabd-1171-0000f4ef50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm7","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63398dbe-1ab4-5382-8d9c-0000ea9ef8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.amd64","pattern":"[url:value = 'http://160.191.242.92/skid.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f9304-ee3a-05a7-e7a8-000052c77897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armeb","pattern":"[url:value = 'http://160.191.242.92/armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6492f1f8-2a44-69e6-bd2f-00005c074536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm64","pattern":"[url:value = 'http://160.191.242.92/skid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644dc794-9ba2-3dd5-7559-000082ba2942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i686","pattern":"[url:value = 'http://160.191.242.92/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa0af22-53fb-e530-07a6-000030f6d411","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/powerpc","pattern":"[url:value = 'http://160.191.242.92/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef57d8a-5159-2345-2b31-00004f92da2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/m68k","pattern":"[url:value = 'http://160.191.242.92/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe9eb5-fd7c-54da-d9b2-0000f4f84021","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f12fad2-bd17-1db1-b25a-00006791dc90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86_64","pattern":"[url:value = 'http://160.191.242.92/skid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6925f738-f12f-2e34-48a7-0000cef752d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.armeb","pattern":"[url:value = 'http://160.191.242.92/pid.armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--293fe3bc-d814-d3f4-6a16-0000fb07cfe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86_64","pattern":"[url:value = 'http://160.191.242.92/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d864e0f9-26f2-0e20-4381-00005ac25b84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7n","pattern":"[url:value = 'http://160.191.242.92/arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93a860f-ee78-2613-ef95-000054ffe445","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b4f903-ea68-f791-0154-0000ff42d676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar5","pattern":"[url:value = 'http://160.191.242.92/skid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e1df07-d6d6-10bb-abbe-0000209458cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.sh4","pattern":"[url:value = 'http://160.191.242.92/vlxx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17683ca-eccc-1639-3145-0000c1864968","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm","pattern":"[url:value = 'http://160.191.242.92/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7980ae-3ceb-8bda-330d-000035ca642a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/t","pattern":"[url:value = 'http://160.191.242.92/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4119db-c4bc-e505-dc41-0000ef7147fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489eed4c-c2d5-b104-b32f-0000719102a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv7l","pattern":"[url:value = 'http://160.191.242.92/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a66376-0d6e-7a83-ae69-0000d56f6fe4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm6","pattern":"[url:value = 'http://160.191.242.92/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d429cb3-fbd6-4455-d5b0-00007648e030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--559cce64-9b44-5299-5714-0000176803a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.powerpc","pattern":"[url:value = 'http://160.191.242.92/skid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4128aa3f-3b35-4e81-17c1-0000ba1c1bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc","pattern":"[url:value = 'http://160.191.242.92/pid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d6ea607-a020-701e-ef33-0000a36e0456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ppc","pattern":"[url:value = 'http://160.191.242.92/skid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ac6b03-1f1c-53e9-a78e-0000af59a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/av.sh","pattern":"[url:value = 'http://160.191.242.92/av.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03dc51c7-2230-9501-b2fb-00004c533782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm6","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1583f6-0192-d48a-9ff0-0000384c6504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/aarch64","pattern":"[url:value = 'http://160.191.242.92/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549a4467-bb8d-9292-6ce4-00003d216804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips.orig","pattern":"[url:value = 'http://160.191.242.92/main_mips.orig']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3a19b1-cd61-84b3-8c6a-00006de6a14c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm5","pattern":"[url:value = 'http://160.191.242.92/skid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80010c9e-ed5e-17e6-38b8-0000d849af4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37bfebf-8495-14c0-1d78-0000779c98e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/zero.mips","pattern":"[url:value = 'http://160.191.242.92/zero.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316ea865-e8f8-ba96-6cae-000076be36ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3274e0b5-5702-62ad-9dc3-00003ef53fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mipsel","pattern":"[url:value = 'http://160.191.242.92/skid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bbd2b7-182c-f30e-b52e-0000dbda60f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar6","pattern":"[url:value = 'http://160.191.242.92/ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8025acb-3755-d59c-30c4-0000c7d6e855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm","pattern":"[url:value = 'http://160.191.242.92/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f17ea-5098-17aa-3a40-0000fe51a954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/k.sh","pattern":"[url:value = 'http://160.191.242.92/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd88ba46-b0bf-b795-1b63-00007d28f901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/wget.sh","pattern":"[url:value = 'http://160.191.242.92/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd77b99-2c33-2c8a-9052-0000d2c821b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///mpsl","pattern":"[url:value = 'http://160.191.242.92///mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ac56dd-ecee-9e12-b6f4-000042a6f65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc64","pattern":"[url:value = 'http://160.191.242.92/pid.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f45d5ef-a895-3440-c87c-0000ac315609","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenkins.py","pattern":"[url:value = 'http://160.191.242.92/jenkins.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6068dc09-a037-8bce-9db8-000095431d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ppc","pattern":"[url:value = 'http://160.191.242.92/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b787277-825e-e732-c50c-0000e61fd91a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massload","pattern":"[url:value = 'http://160.191.242.92/massload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ab619e-8f28-83a7-973b-00003e19f030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mips","pattern":"[url:value = 'http://160.191.242.92///main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6d6dd2-5b80-8e1a-ec95-0000992bac61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0129e2b0-47a4-7537-c508-00001fd2b2bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.aarch64","pattern":"[url:value = 'http://160.191.242.92/skid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3db699-3b6d-7134-cc47-0000ec438320","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm6","pattern":"[url:value = 'http://160.191.242.92/pid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf2f53b-c438-8540-1f9f-0000e630c9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f4f3b-537c-7a53-4a0a-0000d6ae8248","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.m68k","pattern":"[url:value = 'http://160.191.242.92/vlxx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89422cfd-49aa-dd3f-9741-0000e889eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm","pattern":"[url:value = 'http://160.191.242.92/pid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660b79cd-e2fb-377d-d974-0000042e5bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i586","pattern":"[url:value = 'http://160.191.242.92/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c913fa-42e2-f913-52aa-0000cf728849","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i486","pattern":"[url:value = 'http://160.191.242.92/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33623e6-f792-9dd4-7390-0000280a0bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6286057f-d27e-d5fb-8ef5-0000d277b8f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i386","pattern":"[url:value = 'http://160.191.242.92/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7a6d19-1a28-88a2-56e5-0000870250f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar","pattern":"[url:value = 'http://160.191.242.92/skid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5107ecb0-0033-09a9-39a8-00005d8792ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3229db90-5698-bce3-ddf3-0000291b79d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.aarch64","pattern":"[url:value = 'http://160.191.242.92/vlxx.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c68c43e6-fbe7-cee8-50a6-000066433ab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afcba2f-4b73-3ac0-6100-00006d46bc7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92396f32-1fc7-5aeb-d53d-00006ef98ba2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554c6221-057f-4536-5c04-0000e5586db2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mips","pattern":"[url:value = 'http://160.191.242.92/skid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aefeee6-99f8-93e3-47a1-0000a951c85d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar","pattern":"[url:value = 'http://160.191.242.92/ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c953c2da-ed17-a3a2-8dd7-00007fc64003","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11df17af-e01a-043b-952e-000035bd1431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm7","pattern":"[url:value = 'http://160.191.242.92/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eba982f-dd0a-0130-015b-0000554b1efd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar7","pattern":"[url:value = 'http://160.191.242.92/skid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5185dc0d-e18c-2800-77a8-00004cf12b10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv6l","pattern":"[url:value = 'http://160.191.242.92/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850420c5-56db-48f0-6233-0000f1fbf13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm","pattern":"[url:value = 'http://160.191.242.92/skid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddaedc7-d491-393e-dc68-0000ed40734d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86","pattern":"[url:value = 'http://160.191.242.92/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd17683-c400-4840-859e-00009fb4dcba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm5","pattern":"[url:value = 'http://160.191.242.92/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88af32cc-fd96-ecb4-96ad-0000c7dac00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm5","pattern":"[url:value = 'http://160.191.242.92/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99422cb4-b5fc-ea2f-1a88-000097c258e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm64","pattern":"[url:value = 'http://160.191.242.92/bot_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a448105c-8241-9d3f-85a1-0000a315492d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_32","pattern":"[url:value = 'http://160.191.242.92/bot_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f37b9f46-91c2-8956-2442-0000b16f8a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_aarch64","pattern":"[url:value = 'http://160.191.242.92/main_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857ff60c-b81a-7278-da51-00007f3096d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c3d34-27dd-b8d7-e6d6-000092933c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40b0ec4-f930-d4ca-a4c0-00006b818f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/run_adb.sh","pattern":"[url:value = 'http://160.191.242.92/run_adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d9495c-b9f1-4e55-b506-00004f640cf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mips","pattern":"[url:value = 'http://160.191.242.92/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0459f9db-b346-f833-54f2-0000a2632cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mipsel","pattern":"[url:value = 'http://160.191.242.92/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fc9417-055c-dd01-9166-00004c390170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar7","pattern":"[url:value = 'http://160.191.242.92/pid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85a2753-955a-c15d-d245-0000cbf7df00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bda8b9-5081-05ae-5ec2-0000edf77998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar6","pattern":"[url:value = 'http://160.191.242.92/skid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7075cbda-cae9-dd24-0562-00007c097e0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mpsl","pattern":"[url:value = 'http://160.191.242.92/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23bce221-f2f2-c871-8784-000063660793","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar7","pattern":"[url:value = 'http://160.191.242.92/ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--196056f7-81e3-5d87-317f-0000e5aebb68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.m68k","pattern":"[url:value = 'http://160.191.242.92/skid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9a9bf1-2d13-d1d3-b294-0000c21f75ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86","pattern":"[url:value = 'http://160.191.242.92/pid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5007d-de85-6079-2974-00005ee6986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm5","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ee75f-d244-15e9-48d3-000013cd25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_sh4","pattern":"[url:value = 'http://160.191.242.92/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3f725c-2127-4232-3399-00003abfa419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f33b8eb-855f-f46d-5470-0000c20d3f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dc97c9-c2a7-b627-abf9-0000db6d6a23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86","pattern":"[url:value = 'http://160.191.242.92/skid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6f4281-3092-6301-4d47-00000bc36578","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86_64","pattern":"[url:value = 'http://160.191.242.92/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e09ea4e8-fe5f-0957-40ca-00008e5b03f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mpsl","pattern":"[url:value = 'http://160.191.242.92/skid.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7abb0d6e-5f67-56b6-c40c-00005f22b7b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm64","pattern":"[url:value = 'http://160.191.242.92/pid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305c412c-6266-0e27-c0c4-00004e9e9981","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_64","pattern":"[url:value = 'http://160.191.242.92/bot_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1571bd24-488d-e523-a34a-0000bd5b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mpsl","pattern":"[url:value = 'http://160.191.242.92/vlxx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb33d50-aafa-9e75-d71b-0000a04ac13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.ppc","pattern":"[url:value = 'http://160.191.242.92/vlxx.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66a153e0-12bd-d4a8-6c52-00006dd30881","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7","pattern":"[url:value = 'http://160.191.242.92/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b5c7b9-9b86-8750-967c-00000149865c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/xparm7","pattern":"[url:value = 'http://160.191.242.92/xparm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f633480b-d55c-a545-131d-00007f530ea2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm6","pattern":"[url:value = 'http://160.191.242.92/skid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b06ff38-1cc1-dbed-1845-0000a449a9ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153a3e5e-edc1-2e99-bd16-0000159d84ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4","pattern":"[url:value = 'http://160.191.242.92/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5779a757-d392-c9a1-c57a-0000551a9e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mpsl","pattern":"[url:value = 'http://160.191.242.92///main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb2830d-0a94-b716-724f-0000c96fcf18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar5","pattern":"[url:value = 'http://160.191.242.92/ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58851973-0c5d-d772-d82f-0000a4134d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/adbload","pattern":"[url:value = 'http://160.191.242.92/adbload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542e732d-a1d7-67de-708e-00001c27b7b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenload","pattern":"[url:value = 'http://160.191.242.92/jenload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f1184f-5046-7de0-62fa-0000c711d579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/dvrk","pattern":"[url:value = 'http://160.191.242.92/dvrk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46445693-2b55-7cdf-91d2-000096733c1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.156:47216/i","pattern":"[url:value = 'http://110.36.13.156:47216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b071edb8-93bd-d606-db4d-0000f3e926bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/bin.sh","pattern":"[url:value = 'http://112.225.177.252:53050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027172f5-c59a-bb3a-aa7e-00007d72ae49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/i","pattern":"[url:value = 'http://112.225.177.252:53050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f465040-8b88-9cc8-7d5a-0000a1e87180","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/activemq","pattern":"[url:value = 'http://160.191.242.92/activemq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bdd882-96e8-c306-f3dd-0000eaf60ace","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/bin.sh","pattern":"[url:value = 'http://117.26.226.42:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeba7a0b-a032-119e-50ee-00000647610f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/bin.sh","pattern":"[url:value = 'http://105.186.82.28:41113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de5aed3-43b8-d171-a0b9-00009b5d492a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.141/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.141/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a364ea07-d0de-b309-913a-00001f77edaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massloader_dvr.new","pattern":"[url:value = 'http://160.191.242.92/massloader_dvr.new']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52314986-9679-ae08-465f-000061abd6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/bin.sh","pattern":"[url:value = 'http://175.43.119.226:38433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd7ad15-a491-aa38-4113-0000ed85a11b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.137.203:37078/bin.sh","pattern":"[url:value = 'http://182.121.137.203:37078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408873a0-d0fa-b6e4-9078-0000ca7f39a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/cnc_new_x64","pattern":"[url:value = 'http://160.191.242.92/cnc_new_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ff2082-9b5e-ec1a-b798-0000ae414189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenbrute","pattern":"[url:value = 'http://160.191.242.92/jenbrute']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d460d90f-14e2-3313-0e9a-0000e2621d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/bin.sh","pattern":"[url:value = 'http://27.209.155.133:42828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16041bb1-e29c-9e5f-303a-00009eb1de1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcb6f5f-2815-2071-5e95-00007d4540bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f58fcb7-ce75-d941-8623-0000e9deda63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/runme.sh","pattern":"[url:value = 'http://46.151.182.200/runme.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7210a6cc-ab09-7f6d-1ca4-0000892921f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f76385-4780-a3eb-63ff-00007e81c3ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://asegurar2026.duckdns.org/sostener2.vbs","pattern":"[url:value = 'http://asegurar2026.duckdns.org/sostener2.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff62abc-f9c7-6a13-4fa4-00000387d924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/Exodus.sh","pattern":"[url:value = 'http://94.154.43.26:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7924de12-3892-1343-8643-0000c86c3e89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://141.11.100.247/fktn62.sh","pattern":"[url:value = 'http://141.11.100.247/fktn62.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5327886-e2e7-999d-778b-00003eff8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip","pattern":"[url:value = 'https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e93dfc-3ed6-30c5-d8a5-0000fb96dd91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db160b35-7f88-67ec-db13-0000c1f60e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/i","pattern":"[url:value = 'http://175.43.119.226:38433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9cbbe10-50ef-3b35-0a37-00009ea07e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/i","pattern":"[url:value = 'http://125.45.148.93:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c23e94f-c50b-0b2a-5d5c-0000a26bb6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/i","pattern":"[url:value = 'http://105.186.82.28:41113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93bd5623-77ee-8a8f-ab39-0000974c8867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.112.68:46964/i","pattern":"[url:value = 'http://182.126.112.68:46964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd4bc331-c623-8572-bb10-0000d006d661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/i","pattern":"[url:value = 'http://110.36.18.60:52528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5051b3e7-9140-7b04-ffba-00008b5f1fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/i","pattern":"[url:value = 'http://27.209.155.133:42828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dad79-52fa-0f25-16b1-0000ec979841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/i","pattern":"[url:value = 'http://27.193.35.180:45367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2840d7ec-970b-6b44-c53e-0000ec2b7e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/bin.sh","pattern":"[url:value = 'http://42.224.217.218:36543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65afd37f-3c12-5efc-2b82-000047a74203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/i","pattern":"[url:value = 'http://125.44.43.60:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5d40c8-945a-ccf9-2554-00008e69e027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm5","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ac160e-94b5-f89b-b2e4-00003d1032c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ce5ed","pattern":"[url:value = 'http://5.182.210.174/9ce5ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f7fd64-4342-bbc9-932c-00003963de94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f97e6f","pattern":"[url:value = 'http://5.182.210.174/f97e6f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0d5e52-5974-dbdb-c30d-0000c1c7b36a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e6855","pattern":"[url:value = 'http://5.182.210.174/6e6855']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e7d967-a8ff-1ff3-7004-0000d77a9190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2965f","pattern":"[url:value = 'http://5.182.210.174/d2965f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7412713c-076c-e7fb-c316-00001c9a60d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78dbc7","pattern":"[url:value = 'http://5.182.210.174/78dbc7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34b9737-b736-2d95-75d4-00000a5c32ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/10d086","pattern":"[url:value = 'http://5.182.210.174/10d086']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b87dd1-156c-a84a-5262-0000271626da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0df469","pattern":"[url:value = 'http://5.182.210.174/0df469']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4df4dd-1b0c-adff-8986-0000099afa32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef75b2","pattern":"[url:value = 'http://5.182.210.174/ef75b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed33892-f58b-fd1e-e8e8-000002a4162b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f6d64f","pattern":"[url:value = 'http://5.182.210.174/f6d64f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f563229d-dc25-900b-2fa7-000072b4183a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea7693","pattern":"[url:value = 'http://5.182.210.174/ea7693']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d21f4-d288-6574-f99f-0000b495f7e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ZTMe","pattern":"[url:value = 'http://129.121.110.105/ZTMe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d723904-d65e-5340-27ed-000043f070d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f98144","pattern":"[url:value = 'http://5.182.210.174/f98144']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6fc3d-4b57-7a75-d139-000012cbfa02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/af2ec4","pattern":"[url:value = 'http://5.182.210.174/af2ec4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26679570-e598-6c9c-b833-00007f67a77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e4138","pattern":"[url:value = 'http://5.182.210.174/0e4138']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5964da3a-743c-cad6-13bb-0000ec82ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df5d68","pattern":"[url:value = 'http://5.182.210.174/df5d68']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a56e5e-d30c-0c55-3c52-0000cf96579a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vJB","pattern":"[url:value = 'http://129.121.110.105/vJB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c0fa24-08a9-aab9-90c1-0000be056004","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VOgA","pattern":"[url:value = 'http://129.121.110.105/VOgA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf03943-fcc5-2b12-1840-00003593098d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d97f08","pattern":"[url:value = 'http://5.182.210.174/d97f08']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b00099-15c8-b06c-565a-0000cdd575e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3c14b4","pattern":"[url:value = 'http://5.182.210.174/3c14b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4616dd8-5515-6c39-e114-00009d0a65b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/90e80a","pattern":"[url:value = 'http://5.182.210.174/90e80a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a9a90a-1b43-cc98-80aa-0000292edc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/660bc9","pattern":"[url:value = 'http://5.182.210.174/660bc9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29041e05-ad54-2f67-30bc-000021917caa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/839ec9","pattern":"[url:value = 'http://5.182.210.174/839ec9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62832652-b845-005a-a0e1-00002c21eeac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5d360","pattern":"[url:value = 'http://5.182.210.174/a5d360']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c5a9d1-65ee-5abc-8a44-0000ecf62b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6b72d3","pattern":"[url:value = 'http://5.182.210.174/6b72d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd54f54-2a6e-aa04-7bea-00001e9bb6ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2bd33f","pattern":"[url:value = 'http://5.182.210.174/2bd33f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03df392-9be9-d6d2-622a-00006d18d78f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/42736b","pattern":"[url:value = 'http://5.182.210.174/42736b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4fa57e-199b-e8d5-8d18-00009f0a14a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/51f300","pattern":"[url:value = 'http://5.182.210.174/51f300']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359231c6-99ad-e297-acf0-0000b9085ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bed3aa","pattern":"[url:value = 'http://5.182.210.174/bed3aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79415c70-75eb-14ff-a52c-0000b7524ed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/db7b9c","pattern":"[url:value = 'http://5.182.210.174/db7b9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfadac9c-95c4-a8dc-99e5-0000aaaa2845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d4271","pattern":"[url:value = 'http://5.182.210.174/1d4271']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcce745-df83-8e7c-437d-000001cae15e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc89e2","pattern":"[url:value = 'http://5.182.210.174/cc89e2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfd9ad4-adc0-b6fe-110f-0000365434af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/021219","pattern":"[url:value = 'http://5.182.210.174/021219']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2951d848-600e-79e5-2dea-0000df72b78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/824d82","pattern":"[url:value = 'http://5.182.210.174/824d82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56599372-a94d-eca2-c013-0000ebd8c94f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78887f","pattern":"[url:value = 'http://5.182.210.174/78887f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aa043dd-ea8e-05f5-1129-00007ca55c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9c504a","pattern":"[url:value = 'http://5.182.210.174/9c504a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--566b6290-1ae8-6748-0591-000084ce4cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9f15f6","pattern":"[url:value = 'http://5.182.210.174/9f15f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348f4cc-1ca7-664b-ada5-00006414c7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/JPO","pattern":"[url:value = 'http://129.121.110.105/JPO']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73505b0-b6fd-41ca-ce63-00001aec8b2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/57980e","pattern":"[url:value = 'http://5.182.210.174/57980e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1173dffe-6c98-89a5-056e-00008480e233","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/69e697","pattern":"[url:value = 'http://5.182.210.174/69e697']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7410f74b-bd16-0f5e-7c95-0000cef340e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a82d92","pattern":"[url:value = 'http://5.182.210.174/a82d92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc906ff7-9564-b13d-37a9-00005697c41b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0aed7d","pattern":"[url:value = 'http://5.182.210.174/0aed7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--289134f1-aab4-d00d-c3f8-00007c520c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86521e","pattern":"[url:value = 'http://5.182.210.174/86521e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81353439-54ec-85ee-902f-00003255ace4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfeb03","pattern":"[url:value = 'http://5.182.210.174/bfeb03']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b416de8c-cc6f-6c37-41eb-0000f736fa3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fcfd06","pattern":"[url:value = 'http://5.182.210.174/fcfd06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a7fed8-2ca4-cafc-1fa6-0000b561dbf8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/sCy","pattern":"[url:value = 'http://129.121.110.105/sCy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976471-7939-d50d-87bf-0000cebfef2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/41cb7b","pattern":"[url:value = 'http://5.182.210.174/41cb7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb046e1-e3b3-6cde-62ee-00003114a4dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e67edd","pattern":"[url:value = 'http://5.182.210.174/e67edd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba3cb8c-9415-39e9-f10b-00007b885b66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05ac9f","pattern":"[url:value = 'http://5.182.210.174/05ac9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--894aca1a-01ff-615b-2f12-000042dbf4cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f76f77","pattern":"[url:value = 'http://5.182.210.174/f76f77']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4101cf-9157-e2a8-1521-00007645d45e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2025","pattern":"[url:value = 'http://5.182.210.174/7b2025']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af01015-9559-cd2f-d7fe-000019e4c442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7e17e","pattern":"[url:value = 'http://5.182.210.174/e7e17e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfba318e-1b5a-2f1f-b53e-0000f2342ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3603","pattern":"[url:value = 'http://5.182.210.174/cf3603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c67a53f-5d0a-1780-8131-0000dbe75b58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3aa8b4","pattern":"[url:value = 'http://5.182.210.174/3aa8b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92addbe3-a52b-d5a3-a275-00009579e844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/spc","pattern":"[url:value = 'http://43.98.174.233/release/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433e02f9-6561-559a-b45c-0000bd34729b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm6","pattern":"[url:value = 'http://43.98.174.233/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543d97b7-e7c8-ca83-4f05-0000520ffda3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/DjEq","pattern":"[url:value = 'http://129.121.110.105/DjEq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6265b7-cc1d-0d9d-0c2e-00008f5132c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/1htR","pattern":"[url:value = 'http://129.121.110.105/1htR']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6d1c05-8c69-50d7-5505-000027c9c751","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/m68k","pattern":"[url:value = 'http://43.98.174.233/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f2db5-445a-7d80-29cb-00006acebde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/98oE","pattern":"[url:value = 'http://129.121.110.105/98oE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--420e8fce-5301-a489-c1fc-000034e45725","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2EUE","pattern":"[url:value = 'http://129.121.110.105/2EUE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90eb65ba-d6fe-fe89-0bd2-000013ed9aea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/ppc","pattern":"[url:value = 'http://43.98.174.233/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af91646e-6436-e5d9-9e7a-000030a6ae5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86_64","pattern":"[url:value = 'http://43.98.174.233/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da375343-97f5-aefd-2151-0000af81dd75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm5","pattern":"[url:value = 'http://43.98.174.233/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04128d3-1c6a-854a-3acb-0000273f118b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mips","pattern":"[url:value = 'http://43.98.174.233/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3439326f-97df-0640-6647-0000058815fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm7","pattern":"[url:value = 'http://43.98.174.233/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5593ee1a-a1dd-294d-b210-00004c3c7fc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mpsl","pattern":"[url:value = 'http://43.98.174.233/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5881e378-dafc-c55f-e78b-000041786f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm","pattern":"[url:value = 'http://43.98.174.233/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595474-a90c-5b1b-aa8c-00006beef49f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86","pattern":"[url:value = 'http://43.98.174.233/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8fee197-253f-1a9c-b2d4-0000114af685","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.4.69:45512/i","pattern":"[url:value = 'http://110.37.4.69:45512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3789505d-232f-66d7-99be-0000becd9eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/cCf","pattern":"[url:value = 'http://129.121.110.105/cCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0485d5b-b38f-5c7b-2076-0000e38d6e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/86D","pattern":"[url:value = 'http://129.121.110.105/86D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a706ed47-3464-0782-0e1b-00008310f6d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1c7216","pattern":"[url:value = 'http://5.182.210.174/1c7216']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce4daf6d-7c0f-0277-0c09-0000958b8018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/OLE5","pattern":"[url:value = 'http://129.121.110.105/OLE5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63632005-2f93-e6ed-2a72-0000b3829366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b08f0c","pattern":"[url:value = 'http://5.182.210.174/b08f0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab7aa58e-3c59-308e-a8de-00007c7da301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c3efb4","pattern":"[url:value = 'http://5.182.210.174/c3efb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ca4338-d7a9-ecfe-3988-00007eebc6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/aWG","pattern":"[url:value = 'http://129.121.110.105/aWG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfbad18-44ca-6d8b-124d-0000d7855e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/072508","pattern":"[url:value = 'http://5.182.210.174/072508']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28e88bd-7636-9148-c558-0000c0aa943b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d2891","pattern":"[url:value = 'http://5.182.210.174/0d2891']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f66748-4aa1-987d-8812-0000f49d33d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0089b9","pattern":"[url:value = 'http://5.182.210.174/0089b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c59c6a-89e8-252f-811c-000087ccf8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5f60c7","pattern":"[url:value = 'http://5.182.210.174/5f60c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e1ccb-9d0a-e464-ab68-000068434c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cd6ef","pattern":"[url:value = 'http://5.182.210.174/6cd6ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af893644-67b1-1872-eb89-00009e9dcaec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50fc1e","pattern":"[url:value = 'http://5.182.210.174/50fc1e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a66c8-2f30-3aa3-9e3f-0000ce64e69d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/N2J2","pattern":"[url:value = 'http://129.121.114.124/N2J2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca0f290-b8b4-388d-a635-0000f939dd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d236bf","pattern":"[url:value = 'http://5.182.210.174/d236bf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b04f85a-dd2b-1d3d-28a7-00004e55413f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/MyS","pattern":"[url:value = 'http://129.121.114.124/MyS']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a1f071-bfab-5b88-5a97-0000142835f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/tbW","pattern":"[url:value = 'http://129.121.110.105/tbW']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f4937f-69a3-b6df-a1ee-00004b6785ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/71431a","pattern":"[url:value = 'http://5.182.210.174/71431a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4df1fd-b383-f3ca-82f3-00004ca04851","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/8ZG","pattern":"[url:value = 'http://129.121.114.124/8ZG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91222a0b-4d52-ef4c-fead-000042282712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dS74","pattern":"[url:value = 'http://129.121.114.124/dS74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baac8dcb-e54f-7d85-bec7-000038c13570","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c70dba","pattern":"[url:value = 'http://5.182.210.174/c70dba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb4ce61-3710-0447-ab85-0000241669e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/de3259","pattern":"[url:value = 'http://5.182.210.174/de3259']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d818f8eb-14ff-a0c6-8ef8-00009ec889d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/jdDj","pattern":"[url:value = 'http://129.121.114.124/jdDj']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba46951-54a3-e9a9-f3cb-0000fc8cb61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VFgi","pattern":"[url:value = 'http://129.121.110.105/VFgi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e41dac5-0786-a630-d803-0000191e4d98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/gEK","pattern":"[url:value = 'http://129.121.114.124/gEK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c2b695-fa58-dadd-53cf-0000c85b9595","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e216c","pattern":"[url:value = 'http://5.182.210.174/0e216c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d7558-d6c3-c59d-7e92-0000ccfc8a9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2adcae","pattern":"[url:value = 'http://5.182.210.174/2adcae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a694c277-2b89-90ea-0ed5-0000ab66d94c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/191276","pattern":"[url:value = 'http://5.182.210.174/191276']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33835fe-1213-b91d-3fdf-0000c11f61ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e47c56","pattern":"[url:value = 'http://5.182.210.174/e47c56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9f65d9-7ef1-22da-4a1d-00000e145a0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c4b84","pattern":"[url:value = 'http://5.182.210.174/0c4b84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625e9390-5e07-399d-c799-0000dfda5816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35079b","pattern":"[url:value = 'http://5.182.210.174/35079b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73938623-f177-af3e-a895-0000caa24057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.143/bot","pattern":"[url:value = 'http://217.60.195.143/bot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56f4622-c7d9-714f-3bc7-0000b49143bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9fdeb7","pattern":"[url:value = 'http://5.182.210.174/9fdeb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b70fa70-0164-9e5c-b5e8-00001ed1558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e6c81e","pattern":"[url:value = 'http://5.182.210.174/e6c81e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44057ae-6764-7786-73b8-0000a4b6bf33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/932a2a","pattern":"[url:value = 'http://5.182.210.174/932a2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0a30b6-121b-1308-81e9-00000a3618ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5VZa","pattern":"[url:value = 'http://129.121.114.124/5VZa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a7d0e2-b535-2b2e-3bc6-0000979ab247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dnCf","pattern":"[url:value = 'http://129.121.114.124/dnCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44824e15-d97d-6e64-34f7-000083d7a4f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16268e","pattern":"[url:value = 'http://5.182.210.174/16268e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4060af4a-5afb-60f5-cf48-0000ed568c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dMX","pattern":"[url:value = 'http://129.121.114.124/dMX']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ca1064-cd7d-54b6-3272-00008adb1f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/cZg","pattern":"[url:value = 'http://129.121.114.124/cZg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384aa6a-8f44-bfcf-8932-00000f0b1891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878f49","pattern":"[url:value = 'http://5.182.210.174/878f49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40bed60f-a907-d2cf-43ab-00000491fec1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/i","pattern":"[url:value = 'http://42.224.217.218:36543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a54cefe3-19ad-f851-f899-0000f95ec96a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/bin.sh","pattern":"[url:value = 'http://157.66.146.183:43544/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca72186-6c3b-7b5e-fdd6-0000d5e30158","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.111.210.192:51471/i","pattern":"[url:value = 'http://125.111.210.192:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b12e8f-2c08-a72d-609c-0000a97e9336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/bin.sh","pattern":"[url:value = 'http://42.230.35.149:47141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d857cf-df7d-a406-aa91-0000137705d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt","pattern":"[url:value = 'https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c1bfca-bea9-19f4-ccf5-0000e7701661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/i","pattern":"[url:value = 'http://196.190.224.62:43470/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e86aaf9-47eb-43e3-af6d-00001e507ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/bRci","pattern":"[url:value = 'http://129.121.114.124/bRci']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d4894cd-269e-41c6-b716-0000002bc69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/485150","pattern":"[url:value = 'http://5.182.210.174/485150']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d881038b-2694-e906-fcbb-0000a8845162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7866d1","pattern":"[url:value = 'http://5.182.210.174/7866d1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e194d0f8-4dec-2a67-7c75-000039fbf565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3020e1","pattern":"[url:value = 'http://5.182.210.174/3020e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c130dec0-e463-73db-6749-00005cbb0b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50435a","pattern":"[url:value = 'http://5.182.210.174/50435a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a4e46d-9a79-55c8-a715-00005fd04ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/q0V","pattern":"[url:value = 'http://129.121.114.124/q0V']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899ef816-1f3a-5d19-6eda-0000270f4f13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/9WH","pattern":"[url:value = 'http://129.121.114.124/9WH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4fb203-c346-69d3-7cdd-0000c6a06b20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/748a90","pattern":"[url:value = 'http://5.182.210.174/748a90']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de754457-58a2-95c1-8c9f-000029ff72f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/k7M","pattern":"[url:value = 'http://129.121.110.105/k7M']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed64ae95-0bf8-3a61-b5ea-000075f50b7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/aeecec","pattern":"[url:value = 'http://5.182.210.174/aeecec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a2b23f-286a-83fa-7fad-0000356ae9ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/3tp","pattern":"[url:value = 'http://129.121.114.124/3tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a2e0bd-939a-57ed-8f2a-00005f5619e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/seb3","pattern":"[url:value = 'http://129.121.114.124/seb3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab18c10b-c945-5f07-40d1-000039aed4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/NtB","pattern":"[url:value = 'http://129.121.110.105/NtB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61652ec-7222-9a4b-277f-000028d7e65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2af6fb","pattern":"[url:value = 'http://5.182.210.174/2af6fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dca2c82-3f87-d28b-ca7b-00005447ca5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/59a197","pattern":"[url:value = 'http://5.182.210.174/59a197']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736100c3-091c-1038-9a34-00005d2a3c0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/29d455","pattern":"[url:value = 'http://5.182.210.174/29d455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3cc772-8eec-6f59-d69c-000008d7c461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d4a3c0","pattern":"[url:value = 'http://5.182.210.174/d4a3c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dedb5-c1f4-8af2-4d45-0000ef30e972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cdb475","pattern":"[url:value = 'http://5.182.210.174/cdb475']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f71f1b55-b02f-d3f0-3969-0000ba3f6f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07038c","pattern":"[url:value = 'http://5.182.210.174/07038c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd617f6-91cd-bf32-6a78-00002f0cb934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5da97","pattern":"[url:value = 'http://5.182.210.174/e5da97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f011649-174d-d51e-95f9-0000e0a2762f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VHo","pattern":"[url:value = 'http://129.121.110.105/VHo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22add7be-5675-2ad2-38d0-00005da81a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/nf1","pattern":"[url:value = 'http://129.121.110.105/nf1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066dd189-009a-8549-40ab-0000b1b28c1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ab4501","pattern":"[url:value = 'http://5.182.210.174/ab4501']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aaa7f06-e408-35e8-694e-00006e5f16c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d687aa","pattern":"[url:value = 'http://5.182.210.174/d687aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9cd680b-9d4d-858a-1017-0000b0d2f534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ytEr","pattern":"[url:value = 'http://129.121.110.105/ytEr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a508de48-bcd9-b08d-8967-00009b9ff9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e89cd9","pattern":"[url:value = 'http://5.182.210.174/e89cd9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b29e87-0621-741c-3b3c-0000daa13db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a05a88","pattern":"[url:value = 'http://5.182.210.174/a05a88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd285d4e-5edb-a224-58ba-0000b4d26e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0cda73","pattern":"[url:value = 'http://5.182.210.174/0cda73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a280c6b-da74-3b8c-9c57-000029f486c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8fedf4","pattern":"[url:value = 'http://5.182.210.174/8fedf4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ab7b19-cf7d-54b9-b886-00006a4e0789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6be5c4","pattern":"[url:value = 'http://5.182.210.174/6be5c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff615bc-7677-fe08-8838-00005b59f318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/688c63","pattern":"[url:value = 'http://5.182.210.174/688c63']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ec9164-c651-3ad0-11e3-00007a4e330e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff9728","pattern":"[url:value = 'http://5.182.210.174/ff9728']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f73175-0173-2cac-4e47-000043c88fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b9d62","pattern":"[url:value = 'http://5.182.210.174/9b9d62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c002b-3e38-b8af-5e6c-0000846ac1af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c1687","pattern":"[url:value = 'http://5.182.210.174/4c1687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff7ed0f-7ac7-ff52-ada8-00003723e892","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.aarch64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85512f1-f235-edf0-b0c2-000023858959","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv6l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6a61a4-6038-a141-ef92-0000fb86620d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mips","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb78f8d4-4666-e354-b75d-0000fc4d4a32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sh4","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a637073-ceca-2397-6a87-00005945da39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv4l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21831b0f-30d5-7343-5f01-000022ad1bb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sparc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3465572-c675-21e3-3b60-0000fb70b4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.m68k","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7a3b02-3dea-1744-9776-00007b90e6b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.i486","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed893727-ab87-b7f2-a324-0000cd178e96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mipsel","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f8b146-faaf-b7a9-ba4d-0000ced9519a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.arc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b42c1db-a842-4005-240d-00003f995987","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.powerpc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93784132-502c-b63a-a487-00006425f389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv5l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ef2d40-42ef-0867-04fb-000094736da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.x86_64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a14e23b0-948d-c9d0-8ec9-00001ee5a0e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv7l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349caca9-4ab4-0f6d-b19a-0000d9d40fff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/bin.sh","pattern":"[url:value = 'http://42.224.67.199:54598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37a87be-e0c2-6cfe-0932-0000ffa400b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598188e9-3d29-93eb-8994-00003ba00f2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6ef709-8e80-7130-1829-00000a5045df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/c.sh","pattern":"[url:value = 'http://43.98.174.233/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697a3ad5-982d-d2bf-1461-0000ea4df447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/i","pattern":"[url:value = 'http://157.66.146.183:43544/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb53534-5805-0b36-6f7a-0000ce2e8dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/i","pattern":"[url:value = 'http://42.224.67.199:54598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60ef0a9-3cb9-3b5a-e6de-0000d1dbef2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/bin.sh","pattern":"[url:value = 'http://178.205.38.0:44205/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d226c26-ff8e-975b-7c22-0000d49e1a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/i","pattern":"[url:value = 'http://222.141.61.27:55632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce07e70c-d4a0-8633-ed6f-000072374c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/i","pattern":"[url:value = 'http://210.208.111.220:36372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48dbf48-f8f2-cf8e-2ece-00007aabd498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/i","pattern":"[url:value = 'http://115.56.144.249:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be91106f-63fa-7495-3c6e-00007a37788e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/bin.sh","pattern":"[url:value = 'http://27.24.12.180:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c69972-8b99-8139-a1b1-00007187afce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/i","pattern":"[url:value = 'http://210.208.111.100:38107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22de53d8-b068-9fef-fbb1-00008711d040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/i","pattern":"[url:value = 'http://178.205.38.0:44205/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6bcdd3-dae0-bfb5-fcf5-0000df8ddfde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/bin.sh","pattern":"[url:value = 'http://123.12.234.37:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d18451d-8fe2-265d-f367-00007eea56d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/i","pattern":"[url:value = 'http://182.127.103.153:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ba9e73-4e28-2d99-6ac8-000066b76e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/i","pattern":"[url:value = 'http://27.24.12.180:50663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5a705e-5999-d74e-fc51-000036d58742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3e993d-d7f9-3e2d-7b1a-0000b9271f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mipsel","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b070f8e-076e-7c47-5dbe-00000621fa03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/m68k","pattern":"[url:value = 'http://94.154.43.26:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b3b58-1c8f-7af7-c6d0-000006d72cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mips","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5e9b4-c9dc-bae9-9931-00004f247dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/ppc","pattern":"[url:value = 'http://94.154.43.26:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4541172-e272-f691-bdc4-00009cdc4fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm6","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35321e4-172e-ab08-3bcd-0000246028ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm7","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37870be3-36c2-4b85-d2ec-0000cffae428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/sh4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f67d87a-0df9-b518-2d2c-0000372713ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x86","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfec5a8-af30-163d-7b79-0000cf95b5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x32","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7229429-7209-134c-4128-000003a736dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/i","pattern":"[url:value = 'http://123.5.150.18:40732/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dffabbd-bfa6-0d29-c4f7-00005901a2cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/bin.sh","pattern":"[url:value = 'http://106.40.240.24:35127/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14728ddf-7529-60aa-681b-00004285c1a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/bin.sh","pattern":"[url:value = 'http://110.36.26.164:39914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dfb431-b5e6-4edf-2869-0000471a6ee6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/gchLdNMan179.bin","pattern":"[url:value = 'http://185.29.9.108/gchLdNMan179.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03ddcdd-129f-d3a9-0da2-000004c2256f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Virginalling.asi","pattern":"[url:value = 'http://185.29.9.108/Virginalling.asi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9a7d27-d650-ca36-a484-0000433f6886","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/bin.sh","pattern":"[url:value = 'http://42.228.39.67:45035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1b391b-676d-8ab6-716c-000060e44d33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/bin.sh","pattern":"[url:value = 'http://221.15.218.63:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a16103-3ef2-48f5-fda5-00002b07327c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/775af1","pattern":"[url:value = 'http://5.182.210.174/775af1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64663856-c087-b094-c49c-00002f096f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1eb5ef","pattern":"[url:value = 'http://5.182.210.174/1eb5ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6945bf3f-9024-5ed9-fb57-0000beaae002","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e0758e","pattern":"[url:value = 'http://5.182.210.174/e0758e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1f5dca-a5e3-585b-30fc-0000ea537838","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f48b45","pattern":"[url:value = 'http://5.182.210.174/f48b45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a81037-1ecc-5db3-408d-0000479d8f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3ee62b","pattern":"[url:value = 'http://5.182.210.174/3ee62b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3974aaf9-5bd8-b02f-8625-00004de3ec8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b62738","pattern":"[url:value = 'http://5.182.210.174/b62738']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8336c101-b003-7a1f-a4c2-0000e8ef5c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/12cd43","pattern":"[url:value = 'http://5.182.210.174/12cd43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eae43cc-c9bf-ee74-abe3-000086f9b8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ed422a","pattern":"[url:value = 'http://5.182.210.174/ed422a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478acac3-b528-f5df-b686-00005be7380a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d5aa8","pattern":"[url:value = 'http://5.182.210.174/0d5aa8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac3960d-bea4-e68e-f166-0000d9d868d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a34888","pattern":"[url:value = 'http://5.182.210.174/a34888']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd4e8997-a2a5-6e85-4e49-0000770fa493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c55677","pattern":"[url:value = 'http://5.182.210.174/c55677']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--013ad69b-f5a8-7982-4a8d-0000145ea995","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dc7ecc","pattern":"[url:value = 'http://5.182.210.174/dc7ecc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5e924d-279b-e4e9-6e31-00004390cf6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.103.43:39953/i","pattern":"[url:value = 'http://125.43.103.43:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df257779-9993-6b14-cdfe-0000842c2dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/i","pattern":"[url:value = 'http://42.228.39.67:45035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6932e95f-5ec7-309c-8cf1-0000d4fd356f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/i","pattern":"[url:value = 'http://110.36.26.164:39914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ef8ffa8-5869-70aa-3bcc-0000035fcea4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sysupdate.online/tools/grab.cmd","pattern":"[url:value = 'https://sysupdate.online/tools/grab.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8050e46e-81bf-2956-0461-0000e746c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/bin.sh","pattern":"[url:value = 'http://125.46.213.70:47197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a42c4e0-ba69-a576-49ee-00006ad0a762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/i","pattern":"[url:value = 'http://39.74.53.25:55617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00743a0f-c279-4f4b-8a9d-00008deb69cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.93.217:46445/bin.sh","pattern":"[url:value = 'http://110.36.93.217:46445/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02dba92-3df3-b760-94ba-000051143387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/i","pattern":"[url:value = 'http://46.236.65.43:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4661af0-60a4-5754-abe3-0000554e087c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/bin.sh","pattern":"[url:value = 'http://115.54.132.26:37475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a54eb14-2e28-3016-5650-00003ed5f1e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/i","pattern":"[url:value = 'http://210.208.104.156:32771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac54a4e-c5f6-6a37-c5a6-00006fea74be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.114.184:58866/i","pattern":"[url:value = 'http://182.121.114.184:58866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c03dcf0-a1e5-c25d-6957-0000f536edcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/bin.sh","pattern":"[url:value = 'http://222.141.61.27:55632/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949df10a-0bfc-3303-3d65-00007af8ffe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/bin.sh","pattern":"[url:value = 'http://110.37.43.119:55539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e009b6-2564-40ef-aa28-0000446d9e14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/i","pattern":"[url:value = 'http://222.182.123.61:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1afae98-8fc8-b47c-0379-0000719b8319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/i","pattern":"[url:value = 'http://182.123.40.234:41791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f6a38b-a038-aa57-feee-0000c8e2098b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.43.5:55742/i","pattern":"[url:value = 'http://61.54.43.5:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8e08f2-337d-70b1-d2f3-000080efc631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://83.68.249.16:45432/i","pattern":"[url:value = 'http://83.68.249.16:45432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8663a82e-3eaf-f37d-bd02-000074c028c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/i","pattern":"[url:value = 'http://93.157.253.209:37860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea300153-2712-d124-3fca-0000a54ed440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/bin.sh","pattern":"[url:value = 'http://113.231.229.97:60941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f0d05c-edb6-e68f-b4c7-0000ad55a53e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/bin.sh","pattern":"[url:value = 'http://93.157.253.209:37860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88acd1eb-11cf-26a1-a451-0000168261fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/bin.sh","pattern":"[url:value = 'http://175.147.220.91:36766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d30774c-37f7-acb2-74f3-0000cb51ee9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/i","pattern":"[url:value = 'http://1.20.91.236:53593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69541cbe-803a-67b7-b178-0000b1c75e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/bin.sh","pattern":"[url:value = 'http://123.190.20.88:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9b37da-6c3b-4990-b024-000083b21f8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/i","pattern":"[url:value = 'http://175.147.220.91:36766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d6fcdd-c2d4-4089-e6c7-0000a69e3a95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/i","pattern":"[url:value = 'http://42.235.1.153:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2036015b-f7c3-8854-d9a6-0000423e2007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/bin.sh","pattern":"[url:value = 'http://113.58.131.62:38469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219480e9-17b2-e882-8fab-00009ea461b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/i","pattern":"[url:value = 'http://210.208.116.107:43623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d5a15e-ff80-20b2-197a-0000d3f1ed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.189.169:34303/i","pattern":"[url:value = 'http://182.115.189.169:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80719cb-ef8c-ac68-a566-00006ce8006c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/bin.sh","pattern":"[url:value = 'http://59.58.42.82:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb191c0-969e-fb8a-178a-0000b1e5eb51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/bin.sh","pattern":"[url:value = 'http://110.37.116.127:38782/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9778a7-26e9-794f-36b0-0000a1ccfb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/bin.sh","pattern":"[url:value = 'http://39.77.172.60:34449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8545b5fe-8a91-cb21-c420-0000d428f413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.14:38206/i","pattern":"[url:value = 'http://115.55.130.14:38206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692ced19-7419-7ec5-b264-00003e893c7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/i","pattern":"[url:value = 'http://221.15.218.63:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9d25b5-e261-9c9a-37f1-000051ae4655","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/i","pattern":"[url:value = 'http://37.78.176.5:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9882861d-89f2-e429-df35-00008ee7a8d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/bin.sh","pattern":"[url:value = 'http://115.56.144.249:44378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d9e5ed-cc14-c547-76c0-0000894a6bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/bin.sh","pattern":"[url:value = 'http://61.52.33.100:54465/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69837c9d-c39d-1890-81ae-0000f6868a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/bin.sh","pattern":"[url:value = 'http://115.48.160.237:33370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc27d8b-aad6-ec4d-2b68-0000f6ed15e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/bin.sh","pattern":"[url:value = 'http://42.86.136.138:39726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5df945-eef8-2323-0eb6-000052837db5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/i","pattern":"[url:value = 'http://183.23.139.207:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e44d03-344f-3c9b-87a1-00001480ec1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.14:60098/i","pattern":"[url:value = 'http://203.101.187.14:60098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99bdc712-5312-4bc4-d692-0000dabfbc91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/bin.sh","pattern":"[url:value = 'http://222.182.123.61:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01fbe81-38cb-3131-bf44-0000e3cfba7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/bin.sh","pattern":"[url:value = 'http://210.208.111.74:36898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37761186-6f67-2815-2344-0000fb71d5b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/i","pattern":"[url:value = 'http://182.115.68.225:51187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb14c5cc-d5c0-3c87-16ec-0000c094dd07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/i","pattern":"[url:value = 'http://42.224.13.254:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84703c3c-1914-e8f9-bdc2-0000faf1511d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/i","pattern":"[url:value = 'http://175.147.159.41:36190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9be5faa-7382-12aa-8d64-0000316342f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.87/rondo","pattern":"[url:value = 'http://194.26.192.87/rondo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e303ea91-96ec-741e-b831-0000353fdd56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.182:55007/i","pattern":"[url:value = 'http://110.36.72.182:55007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b6808-3dee-ce25-5c42-0000c0932cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.12.61:55017/i","pattern":"[url:value = 'http://110.36.12.61:55017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a04ccc66-132f-afd4-b727-0000a0096765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/bin.sh","pattern":"[url:value = 'http://193.31.201.20:45160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e98506-049c-7204-2c6a-00006fd90f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/i","pattern":"[url:value = 'http://123.190.20.88:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d188eb6-b72a-baf5-a675-000083c9ead2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/bin.sh","pattern":"[url:value = 'http://39.74.33.201:59336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9a2f-2a9e-d38b-01ea-00005b7e9894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/bin.sh","pattern":"[url:value = 'http://175.146.211.156:47338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783c061-86be-04e8-c841-00000228e1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/i","pattern":"[url:value = 'http://115.48.160.237:33370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb249-1df5-5ede-330a-00001a7cf0e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/i","pattern":"[url:value = 'http://103.80.57.126:54698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b4d76-ee9d-acc5-baf4-00001d64e87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/i","pattern":"[url:value = 'http://106.40.240.24:35127/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f1a361-4d9c-0244-2e8e-0000f2f3c92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/bin.sh","pattern":"[url:value = 'http://219.157.18.143:41104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ef227b-3ab6-7b1e-25b6-00003bd57b8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/bin.sh","pattern":"[url:value = 'http://61.137.177.124:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a180-a3b2-56d7-bc6f-0000503dd30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/bin.sh","pattern":"[url:value = 'http://219.157.10.128:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7ffb4a-3d51-656d-4854-0000be89198d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/i","pattern":"[url:value = 'http://221.15.192.179:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2429cd0-ee70-2087-aed6-00003cd99586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/i","pattern":"[url:value = 'http://39.74.33.201:59336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4594ad-fb6b-a226-4f15-0000364d71c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:48403/i","pattern":"[url:value = 'http://210.208.110.42:48403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6491e5-d4fd-e632-d38d-000079da4924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.200.107.56:39903/i","pattern":"[url:value = 'http://221.200.107.56:39903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8810cdd-d5e7-3cec-485a-0000472d1faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/bin.sh","pattern":"[url:value = 'http://42.52.204.44:32770/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d49d3e4-e429-b7ee-d2e2-0000ff885207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.31.205:38686/i","pattern":"[url:value = 'http://110.36.31.205:38686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc33416e-4889-9986-4adb-0000e08dbc2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/bin.sh","pattern":"[url:value = 'http://42.235.91.77:35029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd08df-d4f1-b122-7afa-00005faf03b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/i","pattern":"[url:value = 'http://210.208.111.74:36898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182e645-0c09-2300-49d4-000089b5bc82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/bin.sh","pattern":"[url:value = 'http://115.62.148.107:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580935a4-7f5f-d313-54eb-0000f1eaca58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.41.77:37933/i","pattern":"[url:value = 'http://182.113.41.77:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86cb9fd9-09b7-8c78-de83-00008c41c67a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/bin.sh","pattern":"[url:value = 'http://110.37.106.148:49825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978e9897-e95b-9217-bf7a-0000bfb24579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/i","pattern":"[url:value = 'http://61.137.177.124:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27b5b8e-6231-ba86-f59a-000081455fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/i","pattern":"[url:value = 'http://61.52.33.100:54465/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1475601-6bcb-fbd7-30cd-0000f1ed0189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/bin.sh","pattern":"[url:value = 'http://61.52.156.140:46601/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de46ae2f-f54b-1cb7-be26-0000685c316f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/bin.sh","pattern":"[url:value = 'http://45.170.224.217:57287/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--721b939c-f150-aadf-01be-0000d076147d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/bin.sh","pattern":"[url:value = 'http://122.139.13.204:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34777fd3-2cf0-8992-0fa3-00001d7f4f55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/i","pattern":"[url:value = 'http://115.63.145.118:58396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d39de9d-06bf-70a7-060b-000041030eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/i","pattern":"[url:value = 'http://122.139.13.204:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7582d8cd-5ea5-1ace-491c-00002756edd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/bin.sh","pattern":"[url:value = 'http://42.55.212.26:51890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ed084b-0a11-30c3-1450-00009edb3347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/i","pattern":"[url:value = 'http://193.31.201.20:45160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c213d50e-a0ac-08e9-5898-0000861918e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/i","pattern":"[url:value = 'http://125.44.196.6:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12dc49d-ce3a-98e7-cf40-0000ebf420f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/bin.sh","pattern":"[url:value = 'http://42.224.126.91:33505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df806548-49ed-6c88-cde6-00007fcd85cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/bin.sh","pattern":"[url:value = 'http://125.44.196.6:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1390fcab-23d5-1544-0531-0000695dcac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/i","pattern":"[url:value = 'http://42.224.126.91:33505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649414ae-5e4e-1e46-6b36-0000fe5cb5a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/bin.sh","pattern":"[url:value = 'http://222.138.119.216:49346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c62c79-af42-d5d3-dded-0000e4601a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/i","pattern":"[url:value = 'http://42.180.15.83:57232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80eefb79-2b3e-bfbe-f9cf-00001face1f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/bin.sh","pattern":"[url:value = 'http://182.115.68.225:51187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3be3f9-ea5f-52f7-f407-00008a3b4454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/i","pattern":"[url:value = 'http://42.86.136.138:39726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549c3bf9-6591-b551-2b74-00008b683df2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/i","pattern":"[url:value = 'http://45.170.224.217:57287/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9977154-f408-cf7d-a959-0000c78c8d3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/bin.sh","pattern":"[url:value = 'http://216.249.4.20:36657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e4c013-cb22-44d4-f540-0000868ba99b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://120.28.135.245:34017/bin.sh","pattern":"[url:value = 'http://120.28.135.245:34017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b60989e-4a39-cffd-6d44-0000f7d1b135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/i","pattern":"[url:value = 'http://60.184.163.17:41849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89d0c71-7226-5311-e710-0000834ee7c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.64.242:41071/bin.sh","pattern":"[url:value = 'http://105.186.64.242:41071/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf3bd79-5bf4-62dd-5a34-0000da8965ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/i","pattern":"[url:value = 'http://182.114.192.237:54399/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef35c14-95f2-732d-3603-0000dde3ff42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/bin.sh","pattern":"[url:value = 'http://60.184.163.17:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a281f6-10f7-d4a7-dc79-00005f7f2124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/i","pattern":"[url:value = 'http://210.208.110.51:46526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51c68bd-30b1-4053-d76e-000080d595e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.226.103:50631/i","pattern":"[url:value = 'http://42.230.226.103:50631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06568758-29fc-6550-7d83-00006013c0ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/bin.sh","pattern":"[url:value = 'http://210.208.104.156:32771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a2ef96-d8be-e9a9-2c42-0000ecd6ac1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/bin.sh","pattern":"[url:value = 'http://183.23.139.207:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17871253-0984-fe2e-f6db-000091a4b300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/bin.sh","pattern":"[url:value = 'http://42.224.13.254:55917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac73f69-c080-94d5-a37f-0000eeaec894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/i","pattern":"[url:value = 'http://113.58.131.62:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288e2c3d-4f36-b30f-e3d4-0000ebf4f6cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/bin.sh","pattern":"[url:value = 'http://210.208.116.107:43623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99550c01-95c7-02da-a422-00004200c577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/bin.sh","pattern":"[url:value = 'http://113.228.149.193:49576/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad34f8d-057e-56df-68a6-000075a01df3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/i","pattern":"[url:value = 'http://42.235.91.77:35029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312f28a7-9a50-fdf4-ba93-0000decd9d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.94.120:47055/i","pattern":"[url:value = 'http://123.14.94.120:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e50647c-ae91-d8f5-25dd-0000c3672b93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.181.9:49913/i","pattern":"[url:value = 'http://27.215.181.9:49913/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188f594a-fa53-22af-a19d-00009f05350c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.185.8:38535/i","pattern":"[url:value = 'http://42.234.185.8:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82efb59f-3f79-e555-b2fe-0000ab3e1ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/bin.sh","pattern":"[url:value = 'http://175.148.29.181:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0dc3d6-8a5c-a338-b867-0000e314f4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/i","pattern":"[url:value = 'http://110.37.116.127:38782/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bbd3b8c-fb34-ad25-f90a-0000953b8778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/i","pattern":"[url:value = 'http://175.146.211.156:47338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9182c76-6a5e-0ddf-1094-00008e57a26d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.157.254:58146/bin.sh","pattern":"[url:value = 'http://115.58.157.254:58146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e908fc-f5a9-b6fa-6fb1-000059a71f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/bin.sh","pattern":"[url:value = 'http://42.180.11.230:34276/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684aa226-63b9-d9fc-3e75-0000c28e0971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/bin.sh","pattern":"[url:value = 'http://103.80.57.126:54698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4be416-d9fa-0387-b7d4-000037c13476","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/i","pattern":"[url:value = 'http://120.84.213.21:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fc0f70-70ad-57d1-2c9a-000093148f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.174.81:41413/i","pattern":"[url:value = 'http://42.238.174.81:41413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b883b71-f0df-604b-0623-00007e94a378","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://96.245.232.132:44492/i","pattern":"[url:value = 'http://96.245.232.132:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a769e76-edc2-3075-3248-0000f2ae22ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.23.55.232:7702/linux","pattern":"[url:value = 'http://119.23.55.232:7702/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ac1fde-045a-cacf-8113-0000615bbcdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.84.190.146:9593/linux","pattern":"[url:value = 'http://47.84.190.146:9593/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1524a54-ac8c-75a5-b20d-000010305434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/i","pattern":"[url:value = 'http://61.137.204.59:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08a8e1d-5696-067d-3016-000048e5aaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/bin.sh","pattern":"[url:value = 'http://42.230.41.97:51870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77889c43-e1c1-b12a-d550-0000b83db844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/bin.sh","pattern":"[url:value = 'http://61.137.204.59:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2896e2ae-b081-0aab-a731-000052b492f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/bin.sh","pattern":"[url:value = 'http://196.190.224.62:43470/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf37e19-9d76-04dc-28f6-000072892a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/bin.sh","pattern":"[url:value = 'http://130.12.209.147:55609/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84df23a-e766-754f-a4d0-0000f36d9b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/bin.sh","pattern":"[url:value = 'http://123.134.41.212:48460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9952c34-40fa-4a99-df3a-00006e40046e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1860c5-119a-84b6-d15f-00001583e229","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ecef52-730e-c848-2b24-0000eb14fef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c47eafd-1501-168f-5dd5-000005436a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0aa510b-bdad-64ab-6c28-00006d808c5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1fc72d8-271c-1423-8408-0000deee84b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883ff041-4fe0-f75e-a1ee-000027f46e51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef730e72-df40-b592-018b-0000f48cf477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.23/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6631916d-8f1c-d5df-d3ff-00008dfda6da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c0d7c9-2aa7-0527-40e2-00003f157931","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22031b-e4ae-abaf-11c1-00001a481ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/bins.sh","pattern":"[url:value = 'http://94.154.43.23/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f8b35c-d83b-6883-a69b-0000ed5e15aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.23/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df78face-2075-9b9c-1312-0000dfca0e02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106bde2b-7d03-ac24-00a6-000005b5bcfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.23/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43726967-8c37-1f8d-9a27-0000b3da58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b079588c-3fd7-c4ea-0dff-000047e2b93e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff38c0d7-308c-607b-240c-00009f480934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64014230-f266-089e-ff1f-00006555bd4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ec058a9-7d36-fe2b-f1d9-0000cbd936c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d76e6-af7b-dce2-22e2-000065a36b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.46/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4112f36c-6a02-3f3d-b1e4-00007993b49d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c86e6f0-ae6a-8663-496b-00004d4d446d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d384f9-3b53-ab0d-1080-00000e56d301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a15e7b-d0fa-57d4-5ced-0000293b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.46/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ab3613-0f64-3d8f-bdec-0000220eb36b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins.sh","pattern":"[url:value = 'http://94.154.43.46/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aade6b-fec1-3cd9-e5be-0000994cc3ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a5c847-7532-82c6-1072-0000243cd4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b92bafe-f038-499e-843f-00004b07af35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.46/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77e681a-7976-f7a5-bc67-0000ff5ede5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448c5f1f-1cb0-e49f-5c5e-00003a212f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/bin/support.client.exe","pattern":"[url:value = 'https://91.92.243.232/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5589621b-200e-93c3-c97a-000027aa3bcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7739a0-41fd-702d-2977-0000edeb71b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c19e80-c2b3-4345-4433-000016e20b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a076e107-8268-7d45-d8dc-00000f3a452f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/bin/support.client.exe","pattern":"[url:value = 'http://194.26.192.164/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd68fa8-4198-d6aa-dc96-0000f0b6babf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/i","pattern":"[url:value = 'http://123.134.41.212:48460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8055ff7-8282-8e61-a197-000009b49527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/bin.sh","pattern":"[url:value = 'http://182.114.192.237:54399/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c63b1ad-8d44-c000-c0c7-00000cb324ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/bin.sh","pattern":"[url:value = 'http://58.22.18.152:33899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf616b57-e85d-2d7a-346f-000021399e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:36195/bin.sh","pattern":"[url:value = 'http://115.55.179.35:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a12955-68ef-799b-ac6c-00007b96a597","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/bin.sh","pattern":"[url:value = 'http://109.236.46.199:42682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826f9bd3-7b1a-0eb8-f6d9-00003401e15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.225:33235/i","pattern":"[url:value = 'http://115.63.242.225:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7276eaf-67e2-c5ab-f08a-00007826ac66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/i","pattern":"[url:value = 'http://58.22.18.152:33899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee5ddd0-902d-2e48-c2e5-00009d09dd55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/i","pattern":"[url:value = 'http://121.231.139.26:36392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f32bbc1-16d8-c389-0b9b-0000abfd9f15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/i","pattern":"[url:value = 'http://109.236.46.199:42682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbaa57b-6366-d42a-bf21-00005416d0fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d7f673-5263-e869-7347-0000f8909213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/bin.sh","pattern":"[url:value = 'http://37.78.176.5:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9beb39e-9453-0da5-66f9-0000e0cab30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/dlink.sh","pattern":"[url:value = 'http://95.155.151.113/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d951a704-151b-d015-00ee-00000e55a6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://chrome-windows.ru/ChromeSetupWindows.exe","pattern":"[url:value = 'https://chrome-windows.ru/ChromeSetupWindows.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81d2e60-f5e6-c59e-6247-0000d4a0eba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.193.111:43262/i","pattern":"[url:value = 'http://125.42.193.111:43262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86410f7d-14ef-dbac-44c9-00002e1cd3e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da0e2b82-ad16-f33f-d91f-0000870f5af4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm7","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a05e8-d05c-a8e8-e121-0000a54e885b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/m68k","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc146ef-960f-3b34-e8f6-00001c88c84a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/sh4","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba4f7f7-4667-2137-abd9-0000cebb30cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mpsl","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a993a4b8-d097-7a2d-9f4f-00009c5651bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/ppc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e76313e-b1ce-d104-95a1-0000a5b85e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mips","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b08591-6377-ec70-3ea2-00008532483c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.78:38525/i","pattern":"[url:value = 'http://27.37.100.78:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db71290-5eb6-44c5-18a9-00002494abbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd51ae1-b108-755b-ff5c-00001ac22312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/spc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134f9300-d752-4cdb-ebd9-00004879c065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/bins.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad091b14-cc3f-f7b1-26da-00003fb33d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm6","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec624e29-5ad1-9640-42ee-00000eac5ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.7:34859/i","pattern":"[url:value = 'http://123.11.10.7:34859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7577f479-fabe-33d4-e93e-000011e7d622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.137.87:60618/i","pattern":"[url:value = 'http://120.28.137.87:60618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34004aae-7f1d-c45e-6501-00002d06927f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm5","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84219576-c6e2-455e-b407-0000e4553fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--202aaf38-781b-689d-b2f8-00002c2a9856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86_64","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f9227a-022d-0ca2-8c6f-0000cec3a4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4aac669-a086-b97c-695d-000018d38f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/i","pattern":"[url:value = 'http://42.231.88.100:39090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d42d8b-d21c-09e3-2daa-0000b882fde8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/bin.sh","pattern":"[url:value = 'http://42.231.88.100:39090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0032bc-6756-a5e8-4a1b-0000d5421604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/bin.sh","pattern":"[url:value = 'http://39.79.249.142:34161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7045a9cc-35f9-f62a-330e-000015b09845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.22.249:50192/i","pattern":"[url:value = 'http://110.36.22.249:50192/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58928aa3-c46c-4dc6-5363-0000f0252466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/i","pattern":"[url:value = 'http://39.79.249.142:34161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d1bf303-1036-d4e4-704d-000043c48078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.4.125:52901/i","pattern":"[url:value = 'http://110.36.4.125:52901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3506b50e-460e-87fd-878c-00008e399759","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/bin.sh","pattern":"[url:value = 'http://78.60.75.209:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e9af9-775c-d8c3-3b5f-0000d27ad161","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/i","pattern":"[url:value = 'http://123.8.45.111:33017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9680b7-8a98-cf3d-871a-00001688032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/bin.sh","pattern":"[url:value = 'http://123.8.45.111:33017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0e0e7c-02f7-c518-6060-0000d0a6d408","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.233.197:57647/i","pattern":"[url:value = 'http://110.39.233.197:57647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fc5342-e9af-a29b-f4a6-0000a2f5ac10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/i","pattern":"[url:value = 'http://78.60.75.209:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a41e8df-f30a-4f3f-b87d-0000e5df3fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.143.204:58754/i","pattern":"[url:value = 'http://182.121.143.204:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb6d4e7-4fc0-11ce-aa54-00009f8d9542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/bin.sh","pattern":"[url:value = 'http://46.236.65.43:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f4ec50a-3351-ffb9-59de-0000de088feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/dvr.sh","pattern":"[url:value = 'http://130.12.182.77/dvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f3984d-4f82-328c-5a77-00001118f8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/tvt.sh","pattern":"[url:value = 'http://130.12.182.77/tvt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330d8dba-cfec-80fa-7652-0000cc23a4e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/i","pattern":"[url:value = 'http://121.234.156.10:48875/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--becee502-1bd5-4755-25f6-0000a8277960","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://sysupdate.online:443/agent.ashx","pattern":"[url:value = 'http://sysupdate.online:443/agent.ashx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30052ae-9f87-bdba-8562-0000af1d0ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Godabeg1.exe","pattern":"[url:value = 'https://rcf.co.mz/Godabeg1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e29b1dd-2c01-bbc3-e7d9-0000ce4be426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta","pattern":"[url:value = 'http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5740982-06bc-5c69-a83d-0000906d8499","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://172.245.195.245/35/img_190431.png","pattern":"[url:value = 'http://172.245.195.245/35/img_190431.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c169dd9e-207d-bace-b964-00000303b23b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cecf4eb6-5cf7-1465-6f1f-000050847a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta","pattern":"[url:value = 'http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb28d7c-30d7-dad1-60ae-000002dfe000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/23/img_185335.png","pattern":"[url:value = 'http://107.175.88.87/23/img_185335.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9067d2e-f531-8875-74c5-0000b5578c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/bin.sh","pattern":"[url:value = 'http://182.113.37.79:56846/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21309cd3-02ed-08ad-d2c4-000080943b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/i","pattern":"[url:value = 'http://222.219.74.117:52755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71263cc-f247-8a0e-5a6e-0000d1aa6311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/bin.sh","pattern":"[url:value = 'http://27.193.35.180:45367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9bb525-3b61-adf1-8ff3-0000349fd16a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/i","pattern":"[url:value = 'http://182.113.203.98:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7578f3-720c-f1f5-e42f-0000847dfe66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/i","pattern":"[url:value = 'http://182.113.37.79:56846/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc046e0-98a2-024f-c458-000060d3bf11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.97.97:57347/i","pattern":"[url:value = 'http://123.9.97.97:57347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d91f8f8-2b8e-5347-b3eb-000014ccafac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/bin.sh","pattern":"[url:value = 'http://175.167.183.194:52110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2daee4f-8252-3739-aeed-0000294b6a39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/blink.sh","pattern":"[url:value = 'http://130.12.182.77/blink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9468b101-2bfe-9f99-0df6-00004b03599e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.5.94.63:4370/i","pattern":"[url:value = 'http://36.5.94.63:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9eeb1a-ea8c-5de1-8230-00004ffaf706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/bin.sh","pattern":"[url:value = 'http://42.235.1.153:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3785f4b-2720-28cf-76a2-0000eb449ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/bin.sh","pattern":"[url:value = 'http://61.52.179.141:33618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8735c9-7a60-5ec6-5b61-0000bbe53c6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/177395","pattern":"[url:value = 'http://5.182.210.174/177395']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa6f492-b6c2-fcdf-9579-000045840bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c60df5","pattern":"[url:value = 'http://5.182.210.174/c60df5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722c0ddf-fe78-3598-c30c-0000f5d5257f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ab3","pattern":"[url:value = 'http://5.182.210.174/340ab3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eb81e5-fe69-db14-9319-00004e1fc51e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/410ae5","pattern":"[url:value = 'http://5.182.210.174/410ae5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343b63eb-19e6-a3eb-f8d1-0000ae1aab9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/56db7c","pattern":"[url:value = 'http://5.182.210.174/56db7c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3814db65-5975-98d5-e682-0000c27c84f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78acf3","pattern":"[url:value = 'http://5.182.210.174/78acf3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bc4fef-1bb3-f47a-2f47-0000e3fe7e57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a0d95b","pattern":"[url:value = 'http://5.182.210.174/a0d95b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--950504a9-beb6-e662-d83f-000036d9125f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/923a9e","pattern":"[url:value = 'http://5.182.210.174/923a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba43ef4-cb4b-fe25-b1b8-0000d6c5e285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16f2c2","pattern":"[url:value = 'http://5.182.210.174/16f2c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b0e4c0-d1d2-07b7-4e7d-000094aa56bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e34be1","pattern":"[url:value = 'http://5.182.210.174/e34be1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9d52f5-07d2-fe10-fef4-0000414a2455","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/18c0e1","pattern":"[url:value = 'http://5.182.210.174/18c0e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77524903-4781-d0f4-e420-000052ee3f14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/033fd6","pattern":"[url:value = 'http://5.182.210.174/033fd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a122362-efa9-7f7b-cb37-0000f2355cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/i","pattern":"[url:value = 'http://175.167.183.194:52110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1259bc0-1389-e72d-f576-0000bc6854b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.69.240:41361/i","pattern":"[url:value = 'http://110.37.69.240:41361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d9770a-ead7-3bf0-44af-0000669045fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.73/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b76c29-ad3d-f095-0f07-00005fa73ad3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/xsvvfgrj.png","pattern":"[url:value = 'http://192.109.139.73/xsvvfgrj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ed2aca-bfcd-3a0c-9388-0000d99e04f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/jackin.png","pattern":"[url:value = 'http://192.109.139.73/jackin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d642ee-da52-8908-ac6b-0000faf5e2f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/bin.sh","pattern":"[url:value = 'http://115.49.64.77:52921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91863854-c74f-b65d-06ef-00008c8759bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/i","pattern":"[url:value = 'http://61.52.179.141:33618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893b029e-e398-1e20-22c8-000080c65b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/i","pattern":"[url:value = 'http://115.49.64.77:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae21a26-dca6-d156-31e1-0000369f0639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/bin.sh","pattern":"[url:value = 'http://221.15.192.179:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9011edb3-780f-b325-655a-0000b20ea824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/i","pattern":"[url:value = 'http://113.239.96.147:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68bbfcb-3952-93a7-1808-000070bbd436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/i","pattern":"[url:value = 'http://182.119.229.251:51013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce62bf99-d65d-f1a5-70de-0000c655741c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/bin.sh","pattern":"[url:value = 'http://182.113.203.98:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb50c70-1d9d-88cf-2e64-0000b739252f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/bin.sh","pattern":"[url:value = 'http://115.50.98.44:53110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f153954-30c9-51ea-7198-0000fc9aaacc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/bin.sh","pattern":"[url:value = 'http://110.37.26.69:40361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c14dd45-bef5-4abb-0f0e-0000ac6b6596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04152430-341f-4ea9-bc1a-00004c28a577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.113.164:60386/i","pattern":"[url:value = 'http://219.156.113.164:60386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06eab4a-5754-a380-c575-00006e826405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm4","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e752061-9701-d6f4-a2b8-000008884596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5473021-e88b-1525-ec2d-0000fa078b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/k.sh","pattern":"[url:value = 'https://94.154.43.60/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf1409c-7e39-3c35-ab6e-00003abc890f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.aarch64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895da45d-ec37-bff8-58dd-00004fa3ac60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mipsel","pattern":"[url:value = 'https://94.154.43.60/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c02591-510b-eba1-9830-00007b308527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm4","pattern":"[url:value = 'https://94.154.43.60/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1fe04c-7d1e-b827-e0e3-00005e80cf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mips","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43bbe3a-4520-a67b-82f4-000016c74f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86_64","pattern":"[url:value = 'https://94.154.43.60/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf7d567-5e9b-2d37-55bd-00006678ce22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86_64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5967faf0-b4e2-c9b0-289f-00007c37cbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm7","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c9742b-c742-638c-100f-000069852ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm7","pattern":"[url:value = 'https://94.154.43.60/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b16e97-6299-16c2-0205-00004b322ebc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mips","pattern":"[url:value = 'https://94.154.43.60/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e191cf00-01a7-0b01-f95f-00003f1c2d1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mipsel","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a12788-4a81-bdd1-c682-000060442ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86","pattern":"[url:value = 'https://94.154.43.60/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1390ca6-5010-ee4b-6751-0000da33a3d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/killbotx.x86_64","pattern":"[url:value = 'https://94.154.43.60/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af43a1be-c112-8745-6682-0000637f0b99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/aarch64","pattern":"[url:value = 'https://94.154.43.60/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21417a4-3eba-486b-ff99-0000355ee05b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/bin.sh","pattern":"[url:value = 'http://112.247.84.112:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859d6ccd-659d-9231-6658-00002af78b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/aarch64","pattern":"[url:value = 'https://quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c979ab7-b19d-6cb9-6a60-0000d1a2c930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86","pattern":"[url:value = 'https://quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0795af26-d474-aa8a-d88a-0000614cb816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15dd59c1-601e-a0a3-d566-0000f700f1b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86_64","pattern":"[url:value = 'https://quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9cfe9c-c59d-a555-2d2a-000073f917f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00944c77-b722-1b31-2d6d-00000e666c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af9c3e11-9bad-24c4-91a1-000051ee4854","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm4","pattern":"[url:value = 'https://quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38bb43a6-5cb8-ceb5-1d5b-0000ae641286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mipsel","pattern":"[url:value = 'https://quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d692e64-37eb-4191-9191-000084c1f60f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78a3361-68b6-0e94-2e82-00004465eb10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d9f819-d514-36c3-ddeb-0000c4ebdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec03ce-21b5-2d96-3148-0000edd603f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/bin.sh","pattern":"[url:value = 'http://112.109.219.147:35136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ad4b3d-9b0b-9f46-cdc9-0000632f7a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm","pattern":"[url:value = 'http://176.65.139.232/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e17bb6-2647-8324-6d9a-00002e63b53c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm7","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893219cb-65cc-c141-2b07-00003a5bc41e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f52667-46e2-4512-8079-0000b7e71db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5770013a-d0b1-05fd-a822-0000949465c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mipsel","pattern":"[url:value = 'https://iloveboats.st/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bb0ddd-0dd2-1393-c16e-0000983af7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mips","pattern":"[url:value = 'https://iloveboats.st/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a53e4b-47fe-cf07-0e0e-00006fc06b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.aarch64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d2eb3-1905-8223-7620-000046d870ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mipsel","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2c31761-15ca-bb98-6aba-0000ba8df397","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm7","pattern":"[url:value = 'https://iloveboats.st/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6446c57f-c904-66fb-c8b4-000082e9ad09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36956fab-c0d8-0151-b5fc-0000435be7ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm7","pattern":"[url:value = 'https://quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31d569b-69ce-d20b-a7cd-00008ad78457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/i","pattern":"[url:value = 'http://136.60.32.162:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d4a0377-69d4-8a6d-9119-000018ecc06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29378e79-4210-c51b-4696-0000b2eb0692","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03edfc3-8af8-8056-7b75-0000a05ea97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ae8ea4-0f63-025d-c9a0-0000be698bac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86","pattern":"[url:value = 'https://iloveboats.st/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a06bc0-0768-0efa-6c9c-00003506c2ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mipsel","pattern":"[url:value = 'http://176.65.139.232/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4b78e0-4be8-282a-9848-00005b7cfe94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/aarch64","pattern":"[url:value = 'https://iloveboats.st/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42043af-3e3d-c65c-a4ec-0000c6686319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b80ec84-c880-ad8f-08d4-00000d39c939","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3edb59a-0352-ae44-a35d-000043fbbc63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b09bc9-c5ff-284f-3624-000033dc08a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/k.sh","pattern":"[url:value = 'https://mail.quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73988d49-7d7c-0545-d009-0000fbc40ee2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed7517-2b26-3857-ab88-000061ece3cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mips","pattern":"[url:value = 'https://quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc82c20-9ab6-c751-3aa4-000060b5229f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/killbotx.x86_64","pattern":"[url:value = 'https://iloveboats.st/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae82a0c-405d-e9cb-f4ee-00003cd61ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm4","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9d4f69-4aee-2c01-594d-00004a2f09ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6698220b-2b44-80d4-fb85-0000a145f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c26395-6aae-75b9-8a69-00003414a425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bca46db-eb94-74fd-cc73-0000a8385c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm4","pattern":"[url:value = 'https://iloveboats.st/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131b2ba1-f924-d6ea-4f4d-0000d0d9466f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/k.sh","pattern":"[url:value = 'https://quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3799610a-5ff2-fd5e-1787-00000cd4b149","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mips","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103b4871-8712-8253-a847-000028ee6bf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c94659c8-43f7-d9c3-6d48-00009f0c8027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a161b5d-ee32-157a-e625-0000cdf086fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86_64","pattern":"[url:value = 'https://iloveboats.st/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--974d536b-299f-e471-c6fb-0000290f5242","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/k.sh","pattern":"[url:value = 'https://iloveboats.st/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc671a7-711a-3999-cf0c-00006c6221f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.x86_64","pattern":"[url:value = 'http://176.65.139.232/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30833fac-8fbe-060a-5fad-0000087b193c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.i686","pattern":"[url:value = 'http://176.65.139.232/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326fabd8-1176-f724-e681-0000e71238ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm7","pattern":"[url:value = 'http://176.65.139.232/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e617b164-c815-88a6-31d3-0000c5a53c8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mips","pattern":"[url:value = 'http://176.65.139.232/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05952fa8-08d1-69dc-750c-0000b16416d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.sh4","pattern":"[url:value = 'http://176.65.139.232/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2d424c-cccc-98ea-cd2d-00000a6640e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efe972e-92b3-9634-4adb-0000a2a0eddc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2df25610-9a70-61fd-c4b2-000057028f11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a4e295-a647-7bb3-a775-0000b25dc972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/i","pattern":"[url:value = 'http://110.37.26.69:40361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d4b388-d012-aa25-edbd-00005506e401","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.aarch64","pattern":"[url:value = 'http://176.65.139.232/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c7cdff-46cd-1221-4f65-000031ba8f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.ppc","pattern":"[url:value = 'http://176.65.139.232/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad84afc-d2c7-9360-754a-0000ca363219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99b8d0f-0891-3809-b54d-000016daaeb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b132d146-0e2e-9e30-9e68-0000d09511b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77b8e9d-bc51-5559-0023-0000636a73bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b701a83f-e779-15ae-8306-0000ca98e1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.228/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540893da-9c6d-06ed-aaa1-000020dfa4f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/bin.sh","pattern":"[url:value = 'http://112.248.106.46:52448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06b34d4-d174-c8ca-7c5d-00001fbc9395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86_64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810b0206-460c-72ba-6587-0000551f8297","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/bin.sh","pattern":"[url:value = 'http://115.63.145.118:58396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23e931-b457-5485-848d-0000fc04f355","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/bin.sh","pattern":"[url:value = 'http://115.61.41.247:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adea0b27-5dac-d74f-99da-00006a5fc7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/i","pattern":"[url:value = 'http://78.25.149.153:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b37814-5fdd-2e97-e5a7-00005ad75f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/i","pattern":"[url:value = 'http://115.61.41.247:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d6e02b-b98a-8d36-b1b6-0000f1a068c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.226:56122/i","pattern":"[url:value = 'http://115.56.147.226:56122/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dab1cd-4eff-f916-da82-0000f6d9e40a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/bin.sh","pattern":"[url:value = 'http://110.136.97.153:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff58d37-2ac0-dca5-c108-000096a85601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.bak.20260810122841","pattern":"[url:value = 'http://95.155.151.113/unifi.bak.20260810122841']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55f9ed3-2562-859b-0d18-00006faf25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.51.94:48009/i","pattern":"[url:value = 'http://115.63.51.94:48009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54d6c44-c5ec-ce96-bc3d-000042c079f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/i","pattern":"[url:value = 'http://110.136.97.153:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ecd100-23ac-3c01-f37a-0000c5e91f97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d8668","pattern":"[url:value = 'http://5.182.210.174/7d8668']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0576a084-963f-3e23-71ab-0000052b9e17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4850bd","pattern":"[url:value = 'http://5.182.210.174/4850bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--128128e4-01a3-fcb5-b02f-00009d7f20dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff5279","pattern":"[url:value = 'http://5.182.210.174/ff5279']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014a23af-67b8-70d1-72bd-00000ef2801d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5490a4","pattern":"[url:value = 'http://5.182.210.174/5490a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2437714f-f321-d00f-9335-0000012962cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2150fc","pattern":"[url:value = 'http://5.182.210.174/2150fc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62ec4227-a820-1235-8b4c-0000a287967d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3e070d","pattern":"[url:value = 'http://5.182.210.174/3e070d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581b1cb8-bb2f-c569-d42a-000053297eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e26c93","pattern":"[url:value = 'http://5.182.210.174/e26c93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1bfd3-41ad-3c8a-418f-0000cfe9ae17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45d538","pattern":"[url:value = 'http://5.182.210.174/45d538']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9254dddc-8a5e-b8d3-ffaa-00002875a7d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad704a","pattern":"[url:value = 'http://5.182.210.174/ad704a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f29b82a-80f2-5764-d16c-0000af023a4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/498482","pattern":"[url:value = 'http://5.182.210.174/498482']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b042e-94b6-5b91-6216-000028ac2221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/def5c2","pattern":"[url:value = 'http://5.182.210.174/def5c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6e03fd-8818-15e4-5934-0000c84dba6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd9da7","pattern":"[url:value = 'http://5.182.210.174/bd9da7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fea9f9a-f162-e440-8d0f-0000b2f4e524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e00f60","pattern":"[url:value = 'http://5.182.210.174/e00f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07175a33-f6c7-2348-a349-000011dc2e79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/650040","pattern":"[url:value = 'http://5.182.210.174/650040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e2c0b-4264-3638-6857-00001dc4ccb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/894fc5","pattern":"[url:value = 'http://5.182.210.174/894fc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55d72dd-998f-e72d-9441-000079f4d505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e40c97","pattern":"[url:value = 'http://5.182.210.174/e40c97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a189028-2242-ce55-ef4d-0000a0054090","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/17949b","pattern":"[url:value = 'http://5.182.210.174/17949b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a88be2fa-c819-341e-6afe-00005a0778c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm4","pattern":"[url:value = 'http://94.154.43.60/fallen.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c86f8847-214f-80a0-711d-0000aff4b0a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ea4b7","pattern":"[url:value = 'http://5.182.210.174/9ea4b7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b447ae-07b0-d3b2-95c7-000054a49be2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05416a","pattern":"[url:value = 'http://5.182.210.174/05416a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a6605b-c36e-be3f-b57f-0000ced7e953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0654cb","pattern":"[url:value = 'http://5.182.210.174/0654cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c368b1a-8ece-cbf8-5aab-0000f20ab73d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dca7ad","pattern":"[url:value = 'http://5.182.210.174/dca7ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff65fc2-65bb-ef83-824d-00000fa0115d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d69405","pattern":"[url:value = 'http://5.182.210.174/d69405']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15e3a1d-981a-b859-2878-000049f2d7e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea4b38","pattern":"[url:value = 'http://5.182.210.174/ea4b38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb216b7d-7c0b-9e81-4037-0000623f1c54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a200f","pattern":"[url:value = 'http://5.182.210.174/4a200f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e6cd3b7-3f03-79f8-12b4-0000da76169a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6441d0","pattern":"[url:value = 'http://5.182.210.174/6441d0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4f433e-9735-bf2e-f916-0000e7b4cd1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1e2ea","pattern":"[url:value = 'http://5.182.210.174/c1e2ea']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab61b86-07b0-343e-bd60-00009afaff55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4403a","pattern":"[url:value = 'http://5.182.210.174/f4403a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12c7113-9495-405f-6ea5-0000eeea7c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9e14a1","pattern":"[url:value = 'http://5.182.210.174/9e14a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1a405b-ba00-826d-6f62-00009984322e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f41d69","pattern":"[url:value = 'http://5.182.210.174/f41d69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbfc4c6a-1346-0d69-c3f3-000059f1b5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8f41cf","pattern":"[url:value = 'http://5.182.210.174/8f41cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425fa11d-da85-6d7a-2f84-0000ac40b402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7ba4cb","pattern":"[url:value = 'http://5.182.210.174/7ba4cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b39a63-2c79-d1da-e59d-00006721b093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9cb1d9","pattern":"[url:value = 'http://5.182.210.174/9cb1d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eb396b3-27ed-914b-d3aa-0000461dca33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76e8cc","pattern":"[url:value = 'http://5.182.210.174/76e8cc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fa06d6f-4272-9178-adcf-0000b1787f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/84e985","pattern":"[url:value = 'http://5.182.210.174/84e985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b12dd66-e278-fa04-b0ae-00007f03385d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d72242","pattern":"[url:value = 'http://5.182.210.174/d72242']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f296e7a-8f32-196f-022b-000014dc76f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6501cd","pattern":"[url:value = 'http://5.182.210.174/6501cd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3182b340-aece-96bd-518e-000048b2d728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm7","pattern":"[url:value = 'http://94.154.43.60/fallen.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313f695a-0ab2-99ba-2e11-00009704132a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b802381-56e7-a05a-c84a-00004790c043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d53f3f-2b1f-c428-cb6a-00007526ebb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44664e9-b8c6-922f-54b0-0000cc6be473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbc24d5-9d14-d2bd-b99c-00004c0bacbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a752c94-f969-c75c-e00a-00001732bbd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:7001/bin.sh","pattern":"[url:value = 'http://110.36.11.225:7001/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb28533-7342-99a8-998b-0000b1c0a082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f3e1a2-fe34-90ba-59ea-00004d5bad8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8456c34c-cf17-2740-9b96-0000ef2941c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3758d21-882e-1bea-45e5-000063bb0a6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/i","pattern":"[url:value = 'http://112.247.84.112:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4f0368-b683-d823-a252-00007ffcd00f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.86:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a901c-d682-edb0-81f9-000006023d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.153.126.58:36155/i","pattern":"[url:value = 'http://183.153.126.58:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd69849-ab7b-0027-6734-00005d15844e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/i","pattern":"[url:value = 'http://119.116.20.47:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248b92ce-9431-cc0f-4013-0000565a4cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/bin.sh","pattern":"[url:value = 'http://119.116.20.47:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f224b435-08da-7428-bd90-00006a7ced4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/bin.sh","pattern":"[url:value = 'http://60.18.11.118:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6038d2b-1b90-88ac-9a66-0000d74a5be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/bin.sh","pattern":"[url:value = 'http://42.234.166.234:40751/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee1e149-bbe0-7fcc-78ad-00001b55e34c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.235.239.199:45573/bin.sh","pattern":"[url:value = 'http://124.235.239.199:45573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48891a3b-72c9-e858-df4f-0000f8018ec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.48.28.98:35726/i","pattern":"[url:value = 'http://36.48.28.98:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1588d6d5-6031-18e8-9091-00004b35dbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.57.227:57005/bin.sh","pattern":"[url:value = 'http://115.55.57.227:57005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa89fc4b-9987-b0e9-3dd1-0000a4d4b240","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/bin.sh","pattern":"[url:value = 'http://42.235.174.78:56482/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--482e612a-bbeb-93da-5474-0000619cd1f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.31.73:46065/i","pattern":"[url:value = 'http://182.113.31.73:46065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93045fe3-88ee-0c90-5bd6-0000659cae46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/bin.sh","pattern":"[url:value = 'http://39.77.117.255:35209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b5d322-3885-e76b-cdae-0000dea1061b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.209.29:47837/i","pattern":"[url:value = 'http://182.123.209.29:47837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15b8c19-f134-abea-bb0e-00008c0e82ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.239.199:45573/i","pattern":"[url:value = 'http://124.235.239.199:45573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d29d20-e15b-b763-349e-000060094473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.68.164:58733/i","pattern":"[url:value = 'http://61.52.68.164:58733/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64d3c24-f366-e6c8-3dd2-0000b0acef96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/bin.sh","pattern":"[url:value = 'http://221.205.10.123:45052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb32b6d4-1bf5-7fcf-4131-000004be8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/i","pattern":"[url:value = 'http://60.18.11.118:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c34bbd76-4ec6-049a-c67c-0000146f1962","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/i","pattern":"[url:value = 'http://39.77.117.255:35209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab55aa9-2655-2692-a232-0000d980d166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.105.15:56982/i","pattern":"[url:value = 'http://219.156.105.15:56982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca0f324-02ef-fbdb-9589-00002275ba28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/i","pattern":"[url:value = 'http://221.205.10.123:45052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e87539-967a-f600-6c8e-000023557ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://waf.proxytunnel.co:889/gg11","pattern":"[url:value = 'http://waf.proxytunnel.co:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15a7c-3ca3-1c9e-e919-000055afe2ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.m","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2535b9-e2c3-763e-1e90-0000d7cc96fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/i","pattern":"[url:value = 'http://112.198.193.62:36489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd071657-6050-1c24-428c-00001f795d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.a","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18da9424-2b87-fff0-f91d-0000b819df5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/bin.sh","pattern":"[url:value = 'http://112.198.193.62:36489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f99686-480a-91c3-021a-0000f2b44528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/i","pattern":"[url:value = 'http://115.58.177.86:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ce02db-c0f1-f884-eb73-00003b4012bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/bin.sh","pattern":"[url:value = 'http://182.127.103.153:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2c5670-7766-f276-e2bc-00007ebebb11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e326cff-00a3-cc73-7d76-00004b710426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/i","pattern":"[url:value = 'http://123.8.90.13:33466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7349ed5-5f15-e84d-c2ba-0000b142e183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/bin.sh","pattern":"[url:value = 'http://112.198.138.178:59015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643098e1-195d-a6d5-aff1-0000c317cfe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/i","pattern":"[url:value = 'http://66.8.135.142:50647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8279d7b-403e-0fa2-51a4-0000cd37838b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/bin.sh","pattern":"[url:value = 'http://42.235.94.77:54061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8d18ed-70c2-b66e-4f10-0000445e6102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/i","pattern":"[url:value = 'http://42.235.94.77:54061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2c965f-6442-1e09-0679-000086556d57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm7","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfbb9d2-deb6-278a-2dde-000065139a88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11724a8a-4c61-179f-3f83-0000ac496c76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm64","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df548ce3-24b2-b1e7-99d1-0000a4e26922","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mips","pattern":"[url:value = 'http://95.155.151.113/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521f6583-d689-2df2-96ec-000082877232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/bin.sh","pattern":"[url:value = 'http://42.53.51.109:44329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a864a2a-0d33-0c04-54e6-0000cfe10768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0a79-8212-ba0d-30e4-000011bdd329","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86_64","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50993476-523c-434a-a05f-000096f3890b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/i","pattern":"[url:value = 'http://112.198.138.178:59015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55894959-d474-2572-ee76-000022c49f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/bin.sh","pattern":"[url:value = 'http://125.45.64.34:37683/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828ab63e-fcf9-fd43-f6f4-00006571eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/i","pattern":"[url:value = 'http://125.45.64.34:37683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3bf6e69-50c4-e59f-2d61-000013d05dc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.27:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2a0fa1-0a29-f0f7-7d1e-000070efa7ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/i","pattern":"[url:value = 'http://123.173.101.27:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135bdeb1-90b2-249a-cb02-0000d3e8b177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/bin.sh","pattern":"[url:value = 'http://125.44.43.60:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea066d4-081e-7fb6-7997-00009b87b7b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/i","pattern":"[url:value = 'http://124.92.80.153:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cdd181-57b7-5567-6097-000069777e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/bin.sh","pattern":"[url:value = 'http://61.52.94.69:44759/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa797254-ef9a-8b32-4888-0000ab131184","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/bin.sh","pattern":"[url:value = 'http://38.43.193.197:44535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472e07b1-4a51-4f42-7622-0000a37d4ac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/i","pattern":"[url:value = 'http://175.172.13.19:60669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc7841c-cc34-0409-11ce-0000bba5152b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/bin.sh","pattern":"[url:value = 'http://210.208.110.21:51285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c61ec185-0188-d221-04bb-00003b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/i","pattern":"[url:value = 'http://38.43.193.197:44535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39539dde-6855-e62d-cc11-000045eca9b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.202.64:34690/i","pattern":"[url:value = 'http://219.155.202.64:34690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e5b6e8-50c4-e508-f976-00003178db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/bin.sh","pattern":"[url:value = 'http://42.180.15.83:57232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a41de6-6b05-a229-43f4-000077cee212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/bin.sh","pattern":"[url:value = 'http://175.147.159.41:36190/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d723ae-9940-8d7d-f70b-0000818e0572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/i","pattern":"[url:value = 'http://210.208.110.21:51285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2895e21-22c4-b395-52cf-00007da522e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/i","pattern":"[url:value = 'http://61.52.94.69:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8daad9a0-ad6f-1b89-fdfc-00004bf72ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/bin.sh","pattern":"[url:value = 'http://78.25.149.153:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3cbc1a2-2d3a-0665-0eab-0000f0dd3124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/i","pattern":"[url:value = 'http://211.158.166.117:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67568aea-8b83-07e1-c5ef-0000136794bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/i","pattern":"[url:value = 'http://71.207.128.92:54954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49bac6af-c6bc-b7e4-fbd5-0000904675e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/i","pattern":"[url:value = 'http://115.50.98.44:53110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f61b257-7d71-1a6b-5ba7-000071c3e040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/bin.sh","pattern":"[url:value = 'http://121.234.156.10:48875/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0422cb-07cd-aeb4-5ecf-0000c953be9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.176.25.195:35054/i","pattern":"[url:value = 'http://160.176.25.195:35054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f3b117-11bc-43fa-d806-00003475cce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/bin.sh","pattern":"[url:value = 'http://125.44.223.124:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66373e4d-7a0f-db4c-608a-0000754ce529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8061d6a-e192-5c7e-b221-0000a739c2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/bin.sh","pattern":"[url:value = 'http://182.119.229.251:51013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b769c35-3a4a-f86e-3fae-0000b24473d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/bin.sh","pattern":"[url:value = 'http://219.155.195.159:54905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dddfe4-864c-74ec-3152-0000a45f4a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/bin.sh","pattern":"[url:value = 'http://61.52.217.13:59440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef473a-fbe4-e9c9-b69a-00005207034d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/bin.sh","pattern":"[url:value = 'http://115.58.54.222:37664/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e3eba9-8595-a55e-6850-0000a656ba16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.37.213:45304/i","pattern":"[url:value = 'http://42.230.37.213:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bf0e12-929b-c05d-eebb-00002e89b127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/i","pattern":"[url:value = 'http://42.232.108.113:57428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168d737-8ecb-9279-f7c3-000058420cd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/i","pattern":"[url:value = 'http://125.44.223.124:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3584a696-8bf1-2a2f-b908-00001f60dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/i","pattern":"[url:value = 'http://61.52.217.13:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13014b24-f952-ef6d-fe00-0000afb80dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/i","pattern":"[url:value = 'http://115.58.54.222:37664/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9703497-0ce0-b3c9-6ac7-0000e70569e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/i","pattern":"[url:value = 'http://219.155.195.159:54905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8422b44-9fe1-e0bf-36ba-00006d47bd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/bin.sh","pattern":"[url:value = 'http://125.44.19.167:51278/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d864e57-4444-d782-8b86-0000f7a43998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/bin.sh","pattern":"[url:value = 'http://110.36.86.83:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f63bfb8-67d5-c68f-cc8c-000088dd688c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/i","pattern":"[url:value = 'http://140.237.36.213:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36178fb6-56a2-b3ac-c83c-00000a6dc679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://myissuereport.live/i/PDF-ticket/download.php","pattern":"[url:value = 'https://myissuereport.live/i/PDF-ticket/download.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0491f833-27f8-f337-85c2-00008936d604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c727d1-82b0-7ccc-c49c-0000a7f8ff3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.173.164:46012/i","pattern":"[url:value = 'http://123.5.173.164:46012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99d9cd2-6cc9-d9d0-f8e5-000029318ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/i","pattern":"[url:value = 'http://125.44.19.167:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985b6e6-47ca-8c8c-761f-000076549754","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/bin.sh","pattern":"[url:value = 'http://123.129.131.159:42876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8d6560e-5b97-5ee7-5505-00007db9e53f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/i","pattern":"[url:value = 'http://123.4.178.145:35087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05423c79-65ec-ef7a-78e4-000044774f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09410297-8eb1-3596-3a3f-00003fc7f856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5892f4ee-394b-6a8e-40e4-000039db6e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2e801e-df86-eb2e-9fc5-0000059b5e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6acb7694-7601-9d03-0b4d-00007bbf90a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/Exodus.sh","pattern":"[url:value = 'http://176.65.139.228:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92166770-f137-1351-21cb-00007eef655d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mips","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7172b2-dbf4-3071-aa25-000008a735e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x86","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf726934-7105-8808-fdb7-0000dd20c8a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a230d146-1da4-2686-1f17-00003e9b708c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf58b629-1212-232c-39b5-000014c5e8f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/ohshit.sh","pattern":"[url:value = 'http://209.141.44.218/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e86f60-709b-bc1f-5b13-0000f01593a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x32","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1bebf75-a031-b06f-4ea5-0000e9c8c308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mipsel","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427055a-849c-2e94-0074-00004d20af92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c2eddd-0607-383a-4682-0000ef9dcd66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.99/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d946a51-50f0-dae5-bd6a-0000f178d574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/i","pattern":"[url:value = 'http://124.235.243.150:48322/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7186526-2bb0-1864-cd53-0000c350788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ac3c48-dc19-0116-f9b7-0000266c0f89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://yogasitesdev.wpengine.com/2/","pattern":"[url:value = 'https://yogasitesdev.wpengine.com/2/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a675331-fa35-fb61-9392-0000939f304f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e73ab47-c0fc-87d5-034d-0000055c9b11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f63c84-10c6-e828-054c-00003567d8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/payload.sh","pattern":"[url:value = 'http://149.50.154.101:8000/payload.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1215e6b6-7606-41d6-5be5-0000505c779f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.loong64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.loong64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cf6339-2466-b302-1336-00009ac77c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/bin.sh","pattern":"[url:value = 'http://115.192.88.110:35897/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea0746f-8f5d-d166-4ed5-00002a78d607","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/bin.sh","pattern":"[url:value = 'http://115.49.203.6:36171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d276a9d-875c-a4e1-ac92-00003ba55876","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ac8c9f","pattern":"[url:value = 'http://5.182.210.174/ac8c9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71b6c78-4b03-6144-1162-0000edb991b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bf39af","pattern":"[url:value = 'http://5.182.210.174/bf39af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee0a026-c54f-80bd-81d7-0000c6bb2183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81ee8a","pattern":"[url:value = 'http://5.182.210.174/81ee8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b65fb7-a5ff-f538-dd78-00002b46fa1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Zzz","pattern":"[url:value = 'http://129.121.110.105/Zzz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e25deb51-ebe3-43e5-7199-0000315806a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e748fa","pattern":"[url:value = 'http://5.182.210.174/e748fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f56e3eb-95fb-d30c-b740-0000a69a2e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vkZ","pattern":"[url:value = 'http://129.121.110.105/vkZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f65803-da3d-2ca9-8cfd-0000d08c7bf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b73206","pattern":"[url:value = 'http://5.182.210.174/b73206']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098f0077-b580-02d1-e67e-0000d8cfa5c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2020be","pattern":"[url:value = 'http://5.182.210.174/2020be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed071e35-5c41-a785-141a-00009cf3c844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3066","pattern":"[url:value = 'http://5.182.210.174/cf3066']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24fcfd1-60f6-3b52-3014-0000d23c8d8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/oaF","pattern":"[url:value = 'http://129.121.110.105/oaF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e77e2a-ec53-c58a-ceab-00004e7ea5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/30e00c","pattern":"[url:value = 'http://5.182.210.174/30e00c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a28d6c67-07a9-ee1a-6cab-0000e3af439f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ozDb","pattern":"[url:value = 'http://129.121.110.105/ozDb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48a461-119f-1f58-9396-00000f0f54c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/968def","pattern":"[url:value = 'http://5.182.210.174/968def']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ac114-1f37-aca6-2adb-000090df2029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/f2Um","pattern":"[url:value = 'http://129.121.110.105/f2Um']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3124389-1ac0-bdd0-799c-0000327f08fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/63ab9c","pattern":"[url:value = 'http://5.182.210.174/63ab9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c122cf2-4560-0802-01e1-000088bef8fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9aaf74","pattern":"[url:value = 'http://5.182.210.174/9aaf74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26fe9173-b11f-45da-f1e2-0000909ef7c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05f7c6","pattern":"[url:value = 'http://5.182.210.174/05f7c6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7019b162-57a0-bda6-9732-000026906da9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/WzCx","pattern":"[url:value = 'http://129.121.114.124/WzCx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f28ca8d-2b09-629f-32cb-0000193b5a2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1Gk","pattern":"[url:value = 'http://129.121.114.124/1Gk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a6e3fe-be47-9188-1bef-000001cabd70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/4YN","pattern":"[url:value = 'http://129.121.114.124/4YN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d9a783-c1af-d00d-a5b1-0000094ca07f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1sPM","pattern":"[url:value = 'http://129.121.114.124/1sPM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c19650-dfaf-803b-88cc-000053b2b4dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/FyTv","pattern":"[url:value = 'http://129.121.114.124/FyTv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8601ce0-ad6b-5f7a-c70f-0000f651a9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm5","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52234cfd-0710-ef4c-5155-0000b7c1d404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.22/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67803707-39c1-00e2-3c0f-00008c867058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f220a6-cdae-6999-7c47-0000efb4d30b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49d3da5-72c5-fd64-dcff-0000cf937dd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3980fc-89cc-0912-2172-00002c2edf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm5","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d316b479-e379-20db-f33a-0000db2bc84f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e67ca8-eac6-1a09-dde2-0000e9fe3853","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.spc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a0c2f1-f056-447c-20a2-00006f6a4afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d537e1d0-523e-9ad9-2fe6-0000862717e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db75a4-fc9c-a1fb-e1d7-0000694e362a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad64a143-bf9a-7548-1fc3-00007b695e73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd12f33f-a289-b28c-2872-000017692488","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d63cfba-0c06-2fad-c33f-0000a466c546","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.m68k","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014ffb6c-c667-5923-dbce-0000a490139c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mips","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ca4433-8b29-c5ac-00b5-00003dffbf90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85c38bc-4f34-c7ff-32ad-00004d70e306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pin_img.png","pattern":"[url:value = 'http://64.224.17.122/pin_img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746e05ac-84ab-2951-d033-0000f36959c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pinmsi.png","pattern":"[url:value = 'http://64.224.17.122/pinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876277d0-50b8-b328-951e-0000ba3d9f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/efd.dat","pattern":"[url:value = 'https://bapak178.org/efd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2476bb-9fb8-c9fa-6548-0000781b6e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://admetricslab.org/get_verify?i=27407","pattern":"[url:value = 'https://admetricslab.org/get_verify?i=27407']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57374267-79bb-8858-a28c-0000c31c10d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/gwb.dat","pattern":"[url:value = 'https://bapak178.org/gwb.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b8334e-f865-b202-3117-0000bfa3bb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ownnewstoday.live/MicrosoftVerify.msi","pattern":"[url:value = 'https://ownnewstoday.live/MicrosoftVerify.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c735e3-3b44-7626-7dfa-0000f8e3be3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/i","pattern":"[url:value = 'http://115.192.88.110:35897/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc9a805-42c6-abf3-93d7-000076dbcbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/i","pattern":"[url:value = 'http://115.49.203.6:36171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1dc3b58-998a-2b9f-b7c0-0000250e4b80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe","pattern":"[url:value = 'https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cb92b7-cc40-ae4a-1834-00007ba65efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/gold/random.exe","pattern":"[url:value = 'http://62.60.226.140/files/gold/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff94e69-ebbf-f633-d00a-000019eb9d0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/amka/random.exe","pattern":"[url:value = 'http://62.60.226.140/amka/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2ef09b-99ea-c98b-1976-0000cd5afec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta","pattern":"[url:value = 'http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86e851ee-2538-1e31-1585-00005a7bbedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/img/img_220749.png","pattern":"[url:value = 'http://147.182.181.241/img/img_220749.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515a7305-57f2-cacc-c603-00007d1115cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojscrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojscrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f645fff-8a7f-3462-0bb3-00003d1295a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://duct-master.com/00/newMSI_PRO.png","pattern":"[url:value = 'https://duct-master.com/00/newMSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c607f59f-2d51-b499-53fb-0000f5963afe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/bin.sh","pattern":"[url:value = 'http://42.232.108.113:57428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73237b3-6b7c-0060-f840-00006bbef4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.255.40.244:42822/bin.sh","pattern":"[url:value = 'http://58.255.40.244:42822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a1727c-028e-dec5-d480-000015455c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.156.166.167:43949/i","pattern":"[url:value = 'http://94.156.166.167:43949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd186ef-22a2-9b0b-8711-0000cac50fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install_tm.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install_tm.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1ed920-e4b6-804d-6625-000066ce40a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa3df7c-ddcc-f208-eda8-0000e0e2fff2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.47.72/22/goodthingsforbestfutureforme.hta","pattern":"[url:value = 'http://107.173.47.72/22/goodthingsforbestfutureforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7d7d7d-a5ac-91ec-52b7-00001c7ab46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.173.47.72/22/img_172149.png","pattern":"[url:value = 'http://107.173.47.72/22/img_172149.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98c4c9b-d6f4-795d-b50e-0000bdf2dd74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd9bf2e-bc53-ca43-1387-00005af7f6fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'http://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82515586-87f1-d9a6-0e55-0000ca6eea6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'http://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5eda470-4663-ed0a-2b20-0000b457ca73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7c7d80e-c05d-c21c-2bcd-0000b2097047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/bin.sh","pattern":"[url:value = 'http://140.237.37.249:40109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf378d43-964d-cb53-1d91-0000b03a3581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://sh.classera.com/Naew8m","pattern":"[url:value = 'https://sh.classera.com/Naew8m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3602f2-78b8-cb11-9f84-0000bfba15c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79111d42-cc0e-2e4e-a5b3-000012b45097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd21df52-9af4-d5cc-20a5-0000d1877643","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b94e93e9-3657-6752-44ca-0000994d1b76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'http://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526a45cf-a42a-83be-b5bc-00004eeca787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'http://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ba7be6-f0e8-59a1-6f04-0000be661374","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'https://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f670eac-6c46-d828-e7ec-000069413880","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9951e7fe-1407-98f2-b6b7-0000467f1fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/i","pattern":"[url:value = 'http://140.237.37.249:40109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7613b42-bb07-48ac-5edf-0000816fa201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9872ebc0-e9a0-e3a2-af9d-00006658e941","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb80649-ba7a-9fdb-0172-000018dd6fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6937ac60-cb52-1937-7694-000006aed80d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'http://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2423c8a-17e0-2a89-e161-0000f3f58269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae6503a-f777-50e4-aa52-00002e583f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6058cd-348c-87a7-f0ce-000052d1f662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a9163-9ddb-8a61-9b29-0000666d1391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d73250d3-9f6f-7e07-7b9a-000009d5c2c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978583c3-bf1e-7597-8d50-0000eae3d107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta","pattern":"[url:value = 'https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eac2c28-f6cd-a588-1da0-00002479d605","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6ce567-d495-74d4-7c55-0000dee3b24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63eef917-c7e5-ca6c-0245-00006fd365b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb0e432-bafc-314c-3a39-000022eaf11f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'https://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab763ef7-12f4-cc67-13b7-0000bc5eef24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd2e8257-2ab1-0748-4e27-000048e68a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6639e608-2cdb-9ff3-7230-0000ad44c812","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eebef295-dac0-b573-6851-000005fd22ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fc89e1-5109-58f4-7f92-0000021c62b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a225761d-c280-8405-ee1c-0000d2e97f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc15ace-9550-254f-29a9-0000c370b9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'https://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ea09c1-fac8-c553-4d18-0000f5060996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'https://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035af30d-41ef-69b3-bee4-00004881dc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/uks.exe","pattern":"[url:value = 'https://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1c438c-78cc-2639-30c0-0000d30ce7ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'http://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--946ffcdb-5afd-9664-870d-000010ae4d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'http://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eacb940-4085-ba52-9d44-00006e8b3232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/uks.exe","pattern":"[url:value = 'http://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1001c7-22f2-6d04-5839-0000643ae410","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd85ee37-4d9a-4cc2-2761-0000887d1fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/bin.sh","pattern":"[url:value = 'http://27.37.102.150:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d5b1f7-f4a3-34cd-7159-00004f9a991f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'http://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedb0a7c-a4dc-c628-8380-0000427337e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f57c1ce-17c9-d1f7-b362-000048a9dc23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'http://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25287666-85d9-ad29-fe9c-0000f4fc8493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'http://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976df81d-3084-2606-2aa1-00000fee034a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'http://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd5094b-670b-151f-1951-0000afc2ba36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e87b93","pattern":"[url:value = 'http://5.182.210.174/e87b93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff3ef1e-f2ef-dc49-cabd-00001f9c874e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a3cf9f","pattern":"[url:value = 'http://5.182.210.174/a3cf9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b50f18-3c4d-320c-5f3b-0000dad0ecdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e9b28","pattern":"[url:value = 'http://5.182.210.174/6e9b28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7d3aba-08b6-c804-461d-000037a2edef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c15cf0","pattern":"[url:value = 'http://5.182.210.174/c15cf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28e6b8f-177c-7f25-5762-0000921605ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/285a62","pattern":"[url:value = 'http://5.182.210.174/285a62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3803fe03-87ee-c245-f901-0000e5066646","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/422255","pattern":"[url:value = 'http://5.182.210.174/422255']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f41b9b-87cb-c854-cf64-000016d6efc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/539df1","pattern":"[url:value = 'http://5.182.210.174/539df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb1d74-7c5f-f968-f35d-00005454f245","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e77c7d","pattern":"[url:value = 'http://5.182.210.174/e77c7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7e7906-159e-6047-8da5-0000b9bba797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b1f5e","pattern":"[url:value = 'http://5.182.210.174/3b1f5e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3e2eba-37fb-8491-cf9c-0000f6d92aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b848da","pattern":"[url:value = 'http://5.182.210.174/b848da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e17cbe-043a-5148-5292-00006f3172d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a6fb8","pattern":"[url:value = 'http://5.182.210.174/1a6fb8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91241c83-e0d8-f678-dcbf-0000cd71596a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c76cc8","pattern":"[url:value = 'http://5.182.210.174/c76cc8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0776e216-14bf-4fda-d7e4-000039f3df0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'https://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f05c54c-a316-b9d9-7a23-00004b11e601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.150/img/1.jpg","pattern":"[url:value = 'https://192.255.195.150/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1542814-d2b8-cb99-f3de-0000de027594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.173.9.104/img/2.jpg","pattern":"[url:value = 'https://107.173.9.104/img/2.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b9d963c-c7a9-df97-2c90-000070a29ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'https://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b9d93d-889c-4b87-8a38-00003a824697","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/img_190847.png","pattern":"[url:value = 'https://216.9.224.73/33/img_190847.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c62409-02cd-6fbc-62ed-00007848f837","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.158/img/1.jpg","pattern":"[url:value = 'https://192.255.195.158/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d3e94e-6426-0f0c-cfd8-00001e142e8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c613eac-044a-fa9a-d0a2-00005f64ab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a2c295-a4de-c066-5777-0000ceba4868","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'https://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2bdc634-8286-44bc-e59a-0000ff64b7b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'https://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fdd753d-649f-15d7-c6e5-000072ef10d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'https://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65f0504-5a0e-6962-220b-000075dc55e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'https://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde94570-ef33-d2b6-9252-0000f45fccaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f032ce-0ee1-16c4-4380-00003f8a583c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98afc71b-2363-3025-fe89-000026d7f657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e107387-875e-fa32-9881-000009a972a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/bin.sh","pattern":"[url:value = 'http://42.230.25.51:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b05bae1-bf65-a77e-d275-000032164d9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/i","pattern":"[url:value = 'http://42.230.25.51:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e36a42-a5f4-f4ad-1972-000021792ccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.104.58.65/yurumpmonday.png","pattern":"[url:value = 'http://193.104.58.65/yurumpmonday.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d10380-09ee-0de0-a248-0000cfbaef1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Mistakeful.pfb","pattern":"[url:value = 'http://185.29.9.108/Mistakeful.pfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c07fda5-467e-fd5f-b6c6-000014b3d00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin","pattern":"[url:value = 'http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c28593-4cbd-a27c-2a04-000038bd8cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/nVgXuGSv49.bin","pattern":"[url:value = 'http://185.29.9.108/nVgXuGSv49.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae950140-43f5-f285-7fe9-00001d929e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/i","pattern":"[url:value = 'http://27.37.102.150:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b016c-cd09-46dc-3037-00003b729fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/nHxFirwKSyH79.bin","pattern":"[url:value = 'http://185.29.9.101/nHxFirwKSyH79.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee15b951-714f-d720-7d0a-0000c1d2f0dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/pOuBKgVzyeBCT11.bin","pattern":"[url:value = 'http://185.29.9.101/pOuBKgVzyeBCT11.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2638337-c4d9-039d-3132-000011474d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/Standardpakke.toc","pattern":"[url:value = 'http://185.29.9.101/Standardpakke.toc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b0612c-0003-0f50-d7e0-000072a613e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/vSmLoKx110.bin","pattern":"[url:value = 'http://185.29.9.101/vSmLoKx110.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07b7e22-6cc9-808f-3c43-0000b9d42b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/MnuuOvukjaufYr227.bin","pattern":"[url:value = 'http://185.29.9.101/MnuuOvukjaufYr227.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffacd72-0ccf-b813-957b-0000803f4b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://wp.ameyiando.com:8888/web/office365com.dat","pattern":"[url:value = 'http://wp.ameyiando.com:8888/web/office365com.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51652fa-30cf-8951-b6bf-0000307c39fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab9b70c-22fd-c147-0c93-0000e4558fc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de284457-0930-959c-20fc-00003c255fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc86f1f-cffa-7a6d-4a6d-000094d69cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec23381-7537-bc41-d1e2-00009580f24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f385cacc-7deb-609a-f938-0000c0046212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e455f7d-7cbc-1e42-c8f7-000093ca4a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akocrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akocrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d38186-59f4-b54b-a50d-00002c8c08ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta","pattern":"[url:value = 'http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f038dbea-1c91-bfa5-890b-00001acdb462","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_050827.png","pattern":"[url:value = 'http://107.172.172.254/img/img_050827.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c1f0a-4ba1-fcdd-c341-00000663a2bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://verdiva.life/admin/MSI_PRO.png","pattern":"[url:value = 'https://verdiva.life/admin/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45e9804-bc2e-a104-ba82-0000c6349147","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c4271a-0f74-8c9a-a836-0000a30bd78d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'https://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cc0c3c-6ce2-6a74-8c3d-0000e760984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/bin.sh","pattern":"[url:value = 'http://123.5.204.221:40942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0d135a-00cb-5ae7-5a39-00008a03d33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/i","pattern":"[url:value = 'http://123.5.204.221:40942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b734057-9846-fb4a-86bf-0000a4f01203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.143.36/img/1.jpg","pattern":"[url:value = 'http://107.173.143.36/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef0d699-cc8f-ce1f-7f38-00006c6b56fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin","pattern":"[url:value = 'https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e31a98-7e31-aed1-b602-00008e58e58d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ubua.duckdns.org/update.exe","pattern":"[url:value = 'https://ubua.duckdns.org/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0376fc8-2d82-c7b3-70e0-0000311250f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f3f5541-2656-d915-3e9d-0000f484265a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86","pattern":"[url:value = 'http://36.255.97.21/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd09cb82-4600-8b70-aff0-000047153cdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-3.2-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-3.2-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f501b041-158f-028a-37db-000016ec3c82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm7","pattern":"[url:value = 'http://62.84.172.106/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c41dca-fd8e-c886-81e6-00000b2b3c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-8.6-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-8.6-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c6d14a-87f8-0d14-50f0-0000635fde87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86","pattern":"[url:value = 'http://62.84.172.106/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a1876d-6094-a209-95e9-0000616a8097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_64","pattern":"[url:value = 'http://64.118.132.61/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50ffd0-ea18-4a1f-4ef7-000081b0dc42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/aarch64","pattern":"[url:value = 'http://64.118.132.61/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beeb5dcf-a690-a722-7d6d-000056488c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm","pattern":"[url:value = 'http://64.118.132.61/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61da7efe-c275-12fd-434d-00009c9674a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm7","pattern":"[url:value = 'http://64.118.132.61/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb5d61d-2b7a-f440-61c5-00008ce1503b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_32","pattern":"[url:value = 'http://64.118.132.61/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b33eac3-596c-2d12-7570-00007cde179c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86","pattern":"[url:value = 'http://64.118.132.61/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f281de3-a08d-b00b-48a7-0000950befde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02aa052f-b815-7419-b560-00008c13fac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug.dbg","pattern":"[url:value = 'http://94.154.43.97/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3fb6315-6d7b-095d-cad7-00008a243776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86","pattern":"[url:value = 'http://94.154.43.97/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985f100-10e8-bb43-6e15-00006403e284","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm6","pattern":"[url:value = 'http://94.154.43.97/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d6effc-2a02-4a8f-0e64-0000fefe574e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/m68k","pattern":"[url:value = 'http://94.154.43.97/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5ba787-80a7-f7ae-8459-00000df3eab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6218904d-06e5-dc12-7e9c-0000ee194913","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm7","pattern":"[url:value = 'http://36.255.97.21/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9aee2a5-d6e5-6f88-5fa5-000076e3c55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-7.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-7.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8968dd9-e1e7-0061-3b32-0000e16f9bce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/Sakura.sh","pattern":"[url:value = 'http://23.251.34.31/Sakura.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9261dd1-094a-ac7d-0237-0000555cf3a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/bins.sh","pattern":"[url:value = 'http://64.118.132.61/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbad84c-22f6-5d36-64ec-0000efa32440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/ohshit.sh","pattern":"[url:value = 'http://31.77.227.111/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a461d7-584f-2d32-3e92-0000d1ed5bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/jaws","pattern":"[url:value = 'http://36.255.97.21/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d2bf2b-fe70-2373-7cd4-0000cbeeed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/d","pattern":"[url:value = 'http://62.84.172.106/d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e1975a-5fb8-29c9-ecb0-00007c502098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/bins.sh","pattern":"[url:value = 'http://176.65.139.199/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da49dc-ab7b-516a-e243-00003758468b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/0x83911d24Fx.sh","pattern":"[url:value = 'http://176.65.139.199/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--532284a9-c104-f525-f154-0000a8503fb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/1.sh","pattern":"[url:value = 'http://181.214.136.12/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04acb624-0b13-1da9-69fd-0000a6cd4d6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/t","pattern":"[url:value = 'http://93.114.194.171/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a350e9ab-7d4f-0695-d4c8-0000c58ceedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44cc947f-ee9f-1c68-d7e5-00002c24ab02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm","pattern":"[url:value = 'http://36.255.97.21/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1142373-d374-fe1e-84c0-000006b2301a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_x86","pattern":"[url:value = 'http://36.255.97.21/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a32d0-be03-e473-e000-000002868c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mips","pattern":"[url:value = 'http://93.114.194.171/d/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf84786-7410-3622-1790-00001d9081eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.199/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99587d38-6db9-39e2-b1fc-0000212f2f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.ppc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad7ecf-9eed-b8e2-15d4-0000775e1f56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_i686","pattern":"[url:value = 'http://36.255.97.21/main_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee0ace4-bef8-8cb3-59a3-0000f8252cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_spc","pattern":"[url:value = 'http://36.255.97.21/main_spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1780e14-14a4-8ab4-d670-00002f049a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9920fbe9-478d-92cc-f21e-00009e63b6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee27cb7f-04a7-aadf-fcf4-000026dfd1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d53d1e6-087a-e213-2e8f-000033581d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86_64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--444f8b97-218d-4dbb-5a49-0000323ef61e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm5","pattern":"[url:value = 'http://36.255.97.21/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb36ce-5a43-1af9-5c2a-0000d18354aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mpsl","pattern":"[url:value = 'http://36.255.97.21/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a374b978-c84c-b115-fba3-0000ccfbdc31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arc","pattern":"[url:value = 'http://36.255.97.21/main_arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3215c4d1-57c8-3f9c-b239-0000ba76ec3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_m68k","pattern":"[url:value = 'http://36.255.97.21/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd46da2d-1ea7-9abd-d4c0-0000208b59f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm6","pattern":"[url:value = 'http://36.255.97.21/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f4f0ea-6822-f0e4-44e7-0000fe6fc799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_sh4","pattern":"[url:value = 'http://36.255.97.21/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f564bff5-21a2-12c9-bfc2-00006efbe356","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sparc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3504e23b-1b64-e751-ebab-0000b76d1a9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2132e699-76f2-65fe-32fe-0000c647c31a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a3db999-099c-8c70-402f-00006bdb9f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecec1b88-4adc-c951-5f34-00001bda6ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00826d7e-1a4e-abe8-b8f0-000079fcf712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26c02313-995e-bd11-da4e-0000cfdbed70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c318941f-bfde-be18-f309-0000e54d7668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7673e515-f396-23d9-3885-0000049e036c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.199/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa41eabb-8855-cc5d-325f-000098373e95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm7","pattern":"[url:value = 'http://36.255.97.21/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d156fc35-1e28-56b9-f199-0000ecd73874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-i.p-s.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-i.p-s.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7721e546-1871-fc7a-17e8-0000ef01a35c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-4.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-4.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8d170a-f4a9-9fac-9d27-00006f6bbbfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd24d11-9585-6dfa-4120-0000c4980ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.m68k","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ea4cf6-571b-0eea-3b01-0000592c4117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3786637b-8fe2-8f80-3807-0000e6d9dc59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm7","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5fd1c3-2805-f188-907e-00000468d5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd893234-af3a-8e1d-af6f-0000ae0067da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/p-p.c-.Sakura","pattern":"[url:value = 'http://23.251.34.31/p-p.c-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8a5482-7b46-efd9-bf79-0000c57d7893","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-6.8-k.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-6.8-k.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeaaa5d1-2fa2-e317-e8d2-00009d4e181d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0029aa53-56bf-ec11-90b2-00008cd61948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4bb3dc-78be-2e79-9d47-00005e03ec97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-p.s-l.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-p.s-l.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9bef7e-a47e-8de9-0914-00001422a506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/i-5.8-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/i-5.8-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5132fbfa-873d-54b4-40c4-000073bada0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0a9f6f-1213-ff3d-bcc9-0000a1f1b694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sh4","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9880257-1e04-7bf7-f5a0-00004cd014d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm5","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e39f007-9087-e196-a82c-0000ba803ae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mips","pattern":"[url:value = 'http://36.255.97.21/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68ad6fd-baa4-e98c-54c1-00009365ad3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562cbf0e-63fe-4bbc-6279-0000af6db666","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mpsl","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca612bd-f94d-135e-a1f4-00007eb15e6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_ppc","pattern":"[url:value = 'http://36.255.97.21/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2cdfba-20eb-d488-eb6f-000008c78b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3fe79c7-585f-88fc-8ff1-0000c46ed82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408153ed-efb3-81e1-62b8-00005e65bb3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm6","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724557cb-75a0-e271-eb72-00009ac042f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/s-h.4-.Sakura","pattern":"[url:value = 'http://23.251.34.31/s-h.4-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e398f419-2a1d-7e6a-9079-00006985e27d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mpsl","pattern":"[url:value = 'http://93.114.194.171/d/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44131cd0-8403-2111-1065-00001b366c59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb8be5d8-ce38-03ff-ae45-00002e8f7c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-5.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-5.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356af70f-19d2-95ef-3753-000009b0fd9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.i686","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1ec361-12cf-7fb9-45b3-0000a7bb5dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.spc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550ccc5d-cffb-f690-c921-0000feeb2c71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug_main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bccb8182-e237-6524-b5e6-000038e938ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19bf91e-8878-d5d2-b7a7-0000406ddb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arc","pattern":"[url:value = 'http://94.154.43.97/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4952db-9e6a-2c2e-c95d-0000f2275903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/ppc","pattern":"[url:value = 'http://94.154.43.97/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1bb08c-4371-571d-1ca0-000072f9c0f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/sh4","pattern":"[url:value = 'http://94.154.43.97/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafadb2a-e65b-25c0-8aff-0000fe088194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mips","pattern":"[url:value = 'http://94.154.43.97/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e82c196-9c85-7ee9-a927-0000dcbf85e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm7","pattern":"[url:value = 'http://94.154.43.97/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db2f918-8730-d560-15ac-000006523faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64nosl","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5623d419-89d5-5609-ee5b-0000a0b2ac6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm","pattern":"[url:value = 'http://94.154.43.97/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08ca0ba-4527-33d5-bcf7-000076b64d6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm5","pattern":"[url:value = 'http://94.154.43.97/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0fec82-4261-effa-ea79-000074b32bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/spc","pattern":"[url:value = 'http://94.154.43.97/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8971b02d-70b5-d391-ecea-000007247f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc5cce-570c-af74-c5ef-0000f62c72dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa7c9a-7a13-6060-673e-0000b17b04eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0e9a07-716b-67e0-e02e-00009d2f1c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe7680bb-d481-c849-b07b-0000bf9818e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659b3b4b-550e-9450-e96c-0000d3d6821e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c9d91c-0ec2-6f3a-2638-000053081be8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48290a85-a345-599f-cb13-0000abd5ec6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a49908e-a8d9-4e55-cd67-0000619c0040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee4ecd-9eab-6dde-4d69-00004449ed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/kk2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f86b9d-2b8e-812e-8674-000034d2a65e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/bin.sh","pattern":"[url:value = 'http://213.66.220.87:50871/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0057b9bd-2b27-98cd-cd9f-0000f9f8f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/i","pattern":"[url:value = 'http://196.189.98.110:33070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b6690b-90ee-0cc5-decd-00006e1e6cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/i","pattern":"[url:value = 'http://182.121.106.64:52025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43b7cc0-a54b-4134-7f95-000057580ce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/exploit.sh","pattern":"[url:value = 'http://voltagec2.tech/exploit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94c6ad0-d9e0-fd4f-568d-00009987fee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/bin.sh","pattern":"[url:value = 'http://27.21.31.81:59239/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1885cf-c9d9-c91e-69ad-00003b1d6094","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/bin.sh","pattern":"[url:value = 'http://113.233.65.130:37441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25674c8-b6ce-197d-2ffa-0000a291caa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm","pattern":"[url:value = 'http://voltagec2.tech/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6cdbeec-ca28-e84f-27c8-0000cb1d5187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.52.247.235:47637/i","pattern":"[url:value = 'http://37.52.247.235:47637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b933b9-c08a-f6cf-64b7-0000782fee78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.50.235:56719/i","pattern":"[url:value = 'http://115.63.50.235:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74fb5c99-05ea-7b51-babe-00003ad5ff69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/bin.sh","pattern":"[url:value = 'http://140.237.36.213:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5539eee7-6af5-1ce7-40dc-0000c723d5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/bin.sh","pattern":"[url:value = 'http://119.116.39.158:45878/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1057b5db-d5ab-84ef-8791-0000191701c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/i","pattern":"[url:value = 'http://110.37.106.220:47631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050b58cc-937b-bf7e-f7f2-00008973245b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/i","pattern":"[url:value = 'http://125.41.226.101:43998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c678046-8d92-c578-62dd-00006834d810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/i","pattern":"[url:value = 'http://42.54.158.77:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2011b9e3-4b38-7d5c-ce85-000000651e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/i","pattern":"[url:value = 'http://213.66.220.87:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228c8606-3ebc-80db-a0b7-0000792cc9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/K1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/K1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ee3726-cd7e-d0d7-6a3b-00001f0310c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.40.158.110:41707/i","pattern":"[url:value = 'http://125.40.158.110:41707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a6c733-99ce-3cf7-50fb-000069555961","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9bacbe6-07c5-7bd9-3bd9-00005aa3bd52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.6.238:41787/bin.sh","pattern":"[url:value = 'http://140.237.6.238:41787/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6b592a-a7d0-732b-c43e-000070b5d8af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/i","pattern":"[url:value = 'http://115.56.159.152:47624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68012ea4-3677-c2a2-ab98-0000560789c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/i","pattern":"[url:value = 'http://125.43.44.201:48800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6e105d-c09a-d798-f93b-000070daa63c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/sh4","pattern":"[url:value = 'http://voltagec2.tech/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c566e2-a897-cf52-8107-000086b9bbf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm6","pattern":"[url:value = 'http://voltagec2.tech/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3af1b9-2019-461f-9a2d-0000f55289d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/bin.sh","pattern":"[url:value = 'http://210.208.106.68:36906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61c3aad-7f10-f726-2971-0000147e094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.236.61:47227/i","pattern":"[url:value = 'http://175.165.236.61:47227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af22df9e-9b90-1de5-deff-0000d03b48cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/bin.sh","pattern":"[url:value = 'http://123.8.90.59:40206/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--553b6ac6-723d-c69e-70ca-00004f4dc500","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.214:33968/i","pattern":"[url:value = 'http://182.126.95.214:33968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c151982f-0b04-5479-f30b-0000629325c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/bin.sh","pattern":"[url:value = 'http://115.55.246.222:57542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268590dd-6c86-1921-2d35-00009db41e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/i","pattern":"[url:value = 'http://27.215.44.220:42289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3a50a4-7390-6218-ef98-000056b0340b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/bin.sh","pattern":"[url:value = 'http://125.43.44.201:48800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11cc3758-55a0-56fd-ee55-0000940c1418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm5","pattern":"[url:value = 'http://voltagec2.tech/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8adeaca6-fff6-002a-8b6f-00004a5a68c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/bin.sh","pattern":"[url:value = 'http://119.189.160.169:47495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb88cd7-a8d4-b145-875c-00002e3c8a8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/bin.sh","pattern":"[url:value = 'http://1.20.91.236:53593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1dc98c-b7de-649f-ea75-00006567a768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/i","pattern":"[url:value = 'http://210.208.110.172:59880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1691f2de-cfc4-70ca-0482-0000d2e37d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/i","pattern":"[url:value = 'http://42.176.120.191:54769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c130d3c-ccf2-408e-4108-0000e81766a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/bin.sh","pattern":"[url:value = 'http://124.92.80.153:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2669e59b-31f6-45da-9e4c-00001257cccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/i","pattern":"[url:value = 'http://119.116.39.158:45878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d218e0e-cc77-223b-6991-00001781cd12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/i","pattern":"[url:value = 'http://221.1.226.175:38386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7211825-02fb-2fe7-8669-000004824905","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/i","pattern":"[url:value = 'http://221.202.17.138:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbb363a-c2ca-ba5b-28b0-00000825de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/i","pattern":"[url:value = 'http://113.233.65.130:37441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564626d9-d5a5-7020-e5e5-00002a4f2cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/i","pattern":"[url:value = 'http://42.224.175.231:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcd748-611d-0178-22fa-0000f08d74e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/i","pattern":"[url:value = 'http://222.127.220.233:54104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01c48b9-3efb-be9c-4da7-000012581983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/bin.sh","pattern":"[url:value = 'http://182.121.106.64:52025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15bd153-71b8-be4e-0419-0000fe16a994","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.214.37:48901/i","pattern":"[url:value = 'http://222.137.214.37:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f9578-aae6-5b7e-ffaf-0000c2128c94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.66.105:43207/i","pattern":"[url:value = 'http://42.180.66.105:43207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f875f76d-f740-c078-76de-0000cfebefec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/bin.sh","pattern":"[url:value = 'http://120.84.213.21:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4fe5efd-f1b3-f217-15a4-000037570a28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/i","pattern":"[url:value = 'http://42.230.40.119:58107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c646ef3-2099-575e-1603-0000f2556b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.180.159:41148/i","pattern":"[url:value = 'http://182.121.180.159:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93340659-4144-becf-20da-0000e0f50331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/i","pattern":"[url:value = 'http://175.167.85.100:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9d476a-b9b9-8d8a-867b-000080b03dad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/i","pattern":"[url:value = 'http://222.127.154.48:44547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33995c16-6a63-89b6-94eb-00007300a3e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.14:47408/i","pattern":"[url:value = 'http://125.44.219.14:47408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453258ea-774b-1137-2ae5-0000eab69641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7fd00e-ae2e-a93c-156c-0000bf6ac12b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_64","pattern":"[url:value = 'http://64.118.132.61/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44829d46-049b-5341-3b98-00004738a2c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/duza","pattern":"[url:value = 'http://193.23.118.161/duza']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f7b297-1c5b-c90b-19b8-0000f90040ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86","pattern":"[url:value = 'http://64.118.132.61/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5541a0a-cc9f-0adb-5442-000025caafab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.52.185:33904/i","pattern":"[url:value = 'http://42.237.52.185:33904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0133601c-bce1-0691-cfca-00003b67150a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/bin.sh","pattern":"[url:value = 'http://115.56.159.152:47624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--269ca263-8ce5-48c6-6172-0000db6f31f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.232:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c3ebcf-ac25-9b20-d4d1-0000d1622d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/i","pattern":"[url:value = 'http://210.208.106.68:36906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c524c5a4-2c95-cf26-dd75-0000a089770d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.238.30:45449/bin.sh","pattern":"[url:value = 'http://112.198.238.30:45449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95720121-db38-dcbc-93b8-00006ae948bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/m68k","pattern":"[url:value = 'http://64.118.132.61/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39197310-8100-0bfe-152d-000088296412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3befa047-4728-b1b5-8e36-00001f119dd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/i","pattern":"[url:value = 'http://123.8.90.59:40206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd87480d-f2d7-f1f0-c4c3-0000b7d205be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/bin.sh","pattern":"[url:value = 'http://210.208.110.147:33487/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3469a2a-6650-86d2-64cb-0000d5bd001e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/i","pattern":"[url:value = 'http://119.179.254.223:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39963611-ceca-5ecf-3ace-000079e22bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/i","pattern":"[url:value = 'http://27.21.31.81:59239/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cda29b1-2fa1-56da-7cd8-000012aa7594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://86.98.154.146:19091/i","pattern":"[url:value = 'http://86.98.154.146:19091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2c9a8a-16a2-8518-35d8-0000a1a2d596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/bin.sh","pattern":"[url:value = 'http://42.230.40.119:58107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec4cb60-d000-0d74-e910-000008a686dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/i","pattern":"[url:value = 'http://210.208.111.234:49323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2213f1b-4cff-ce52-a35e-0000f0b233bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.114.109:46437/i","pattern":"[url:value = 'http://115.49.114.109:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9cff28-5341-df61-f373-0000a8b57006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/i","pattern":"[url:value = 'http://219.154.181.58:50132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a22ca06-ec5c-c22d-5a50-0000148e4716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.62.97:34952/bin.sh","pattern":"[url:value = 'http://115.203.62.97:34952/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b37db2-143b-631d-3810-0000fa558af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/i586","pattern":"[url:value = 'http://205.237.110.232/tvt/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c209735-fdd0-3c65-5766-0000d3b85eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.146.164:54323/i","pattern":"[url:value = 'http://61.52.146.164:54323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d3e39a-4b90-cad7-3209-00006e7b5b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/bin.sh","pattern":"[url:value = 'http://221.202.17.138:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a513dc3a-dc09-79a5-f1dd-000074b9ee80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/i","pattern":"[url:value = 'http://113.230.81.126:50462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c38b62-0c5a-edd6-f739-0000653f88b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/bin.sh","pattern":"[url:value = 'http://182.113.201.103:43353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c9e380-245b-4931-32c3-000082a8849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:52311/i","pattern":"[url:value = 'http://120.28.194.160:52311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1eb3c0f-4f81-e684-a66c-0000bb01403d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.138.83:40373/bin.sh","pattern":"[url:value = 'http://112.93.138.83:40373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff05c94-43e7-e3d9-dfe9-0000a5dfb539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/bin.sh","pattern":"[url:value = 'http://175.167.85.100:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f8a84a-fe23-0ef9-6296-00005cc301c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.30.36:60566/i","pattern":"[url:value = 'http://123.12.30.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a96d6c-61e6-0e46-932e-0000cae279fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/bin.sh","pattern":"[url:value = 'http://222.127.220.233:54104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78af750e-c138-005a-abcf-0000eac95b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/bin.sh","pattern":"[url:value = 'http://123.14.193.241:34414/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aab946e-f781-0c53-5f43-0000e21696f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.216.110:54566/bin.sh","pattern":"[url:value = 'http://113.228.216.110:54566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa14f7b-0172-fa05-fc9e-00007ae20231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.197.66:51494/i","pattern":"[url:value = 'http://61.137.197.66:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e80354-b3cc-46d5-1515-00001a3ffa8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/bin.sh","pattern":"[url:value = 'http://125.41.226.101:43998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86c903e-1e26-7049-3636-0000efc62a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_32","pattern":"[url:value = 'http://voltagec2.tech/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b4df57-033c-6215-adf7-00005729d36d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/bin.sh","pattern":"[url:value = 'http://210.208.111.100:38107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7748cfe7-3ed2-dee0-7d9b-00006cbe81df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/bin.sh","pattern":"[url:value = 'http://196.189.98.110:33070/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d408dcec-a956-71c4-faf4-000077d86e9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/i","pattern":"[url:value = 'http://27.204.233.111:38853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ecaea-68dc-d5c0-99ce-0000cb1c6321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/bin.sh","pattern":"[url:value = 'http://42.54.158.77:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef56a46e-b019-0e98-8f68-0000fe5c2e47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.40.36:42435/bin.sh","pattern":"[url:value = 'http://115.56.40.36:42435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b45b79-524b-9fc8-bdd1-00003a15e58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.131.65:54677/i","pattern":"[url:value = 'http://182.120.131.65:54677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a22d61-6d5f-aaa1-ecef-0000a5917cd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc440","pattern":"[url:value = 'http://voltagec2.tech/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0654293c-9606-c1a3-381f-0000f147535a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/i","pattern":"[url:value = 'http://119.166.194.8:35798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a1b6cd-405a-c26a-5bc6-00007e4fda54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/bin.sh","pattern":"[url:value = 'http://42.86.172.171:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3cf20a-a0ef-8adb-a80d-0000f0043fca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc","pattern":"[url:value = 'http://voltagec2.tech/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfc2a32-bc59-6c46-5108-000008f90662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.42.71.239:58276/i","pattern":"[url:value = 'http://115.42.71.239:58276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7e8757-7a9b-cf81-2b6c-00005efa2f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/bin.sh","pattern":"[url:value = 'http://42.235.75.164:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96566111-7395-4501-266e-0000177c2258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.80.60.21:60792/i","pattern":"[url:value = 'http://39.80.60.21:60792/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f24ec9-60da-5273-bd0c-000057411953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:49323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fc73e6-45ec-2123-ca8e-0000e9007d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/i","pattern":"[url:value = 'http://115.55.246.222:57542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1b7347-db0e-8cb1-b4bc-00000fd43d18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/i","pattern":"[url:value = 'http://110.39.249.174:41741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664350df-7f98-a751-fe0a-000027cd7abb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/i","pattern":"[url:value = 'http://27.215.126.58:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ffb1ce-f561-b212-34b8-0000bf9b8e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.215.125:39910/i","pattern":"[url:value = 'http://120.84.215.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a6be4e-bca3-1991-00d3-0000cb816038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/i","pattern":"[url:value = 'http://42.235.174.78:56482/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f49da18-9d06-513e-ed27-000092946398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/i","pattern":"[url:value = 'http://210.208.110.147:33487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b9ec94-868c-307f-1863-00004e1ae2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.78.13:52046/i","pattern":"[url:value = 'http://175.173.78.13:52046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f802dd-9a84-3cf0-4b06-0000f077fb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/bin.sh","pattern":"[url:value = 'http://115.148.236.155:60439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9480f01c-b573-6f5b-0dd0-0000184e7db3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/i","pattern":"[url:value = 'http://115.148.236.155:60439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd36c29-e605-5215-28d6-000015789ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ceb2a5d-7681-5fd3-e295-0000c8a10ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_64","pattern":"[url:value = 'http://voltagec2.tech/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b7ff20a-d137-0d4a-10a4-00001fd12fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/i","pattern":"[url:value = 'http://115.50.150.5:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dd0327-76c1-987e-461f-00001a3be885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/bin.sh","pattern":"[url:value = 'http://119.109.140.49:40757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8cf33e-a0d2-0bbf-9cbc-0000011cf02d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mpsl","pattern":"[url:value = 'http://64.118.132.61/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3284e67-bd5b-d58d-4e94-0000e2a15299","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm5","pattern":"[url:value = 'http://64.118.132.61/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9b0089-2516-9b14-ec81-00007d4f2f52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/i","pattern":"[url:value = 'http://219.157.52.254:39042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22eb73-6449-d5ef-7e4d-0000ca2bf8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a13f3a6-db03-6196-9b65-000092ac9786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/jaws","pattern":"[url:value = 'http://api.mineblack.lol/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3012f270-1c37-db94-83d1-000075b4dfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/i","pattern":"[url:value = 'http://125.110.61.156:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6622aed1-2781-a73e-385f-00009dd9ca4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d2966a-74fd-4bfc-9669-0000fef0953a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.198.5:48196/i","pattern":"[url:value = 'http://182.114.198.5:48196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba4cc8-9728-f657-d680-00001cb2d8e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mips","pattern":"[url:value = 'http://voltagec2.tech/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc0cafcc-bc02-eafd-e804-00004ceac67b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.149.19.3:33747/bin.sh","pattern":"[url:value = 'http://116.149.19.3:33747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad731f5-a4cc-1f23-4f07-00009993b42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/bin.sh","pattern":"[url:value = 'http://110.39.249.174:41741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e365e46c-139f-cc69-db26-0000b271d436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/bin.sh","pattern":"[url:value = 'http://222.127.154.48:44547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d853336-a4e6-c39c-700a-0000bd29ce2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/bin.sh","pattern":"[url:value = 'http://221.1.226.175:38386/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f917610e-6a62-c001-879d-000001ddb77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/sh4","pattern":"[url:value = 'http://64.118.132.61/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e688a01-7bd8-0423-a31e-000077b1b6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mpsl","pattern":"[url:value = 'http://voltagec2.tech/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ff7b2d-39c0-c2a1-3c6d-0000252adf55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_32","pattern":"[url:value = 'http://voltagec2.tech/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5000b-9534-585e-1788-00002843bccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/bin.sh","pattern":"[url:value = 'http://119.179.254.223:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e6e1165-0bb0-8872-741a-000043b923a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/aarch64","pattern":"[url:value = 'http://64.118.132.61/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8ab5a9-bd4b-f25e-5999-0000b600139f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/i","pattern":"[url:value = 'http://182.113.201.103:43353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--442f059b-9a70-7bf3-15cb-0000d396dbe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm","pattern":"[url:value = 'http://64.118.132.61/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8bec14-dec2-4f20-78a5-000067f8a8f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/bin.sh","pattern":"[url:value = 'http://136.60.32.162:36863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f895a9-8f0d-6827-327a-00009d8f27b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/bin.sh","pattern":"[url:value = 'http://219.157.52.254:39042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c242ab-2e2a-95a3-8ceb-0000967e79b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.195.182:57009/bin.sh","pattern":"[url:value = 'http://182.114.195.182:57009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a21d-0ea5-cf5d-575d-00008edbab6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.86:37512/i","pattern":"[url:value = 'http://115.48.149.86:37512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fb9466-a8c3-e277-1849-0000876e9610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/bin.sh","pattern":"[url:value = 'http://219.154.181.58:50132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a53c21-c35b-9a01-afa7-000018b647d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc440","pattern":"[url:value = 'http://64.118.132.61/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cf4569-314d-ca81-1b66-000035a5d1e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/bin.sh","pattern":"[url:value = 'http://125.110.61.156:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e933a64-0a83-e8e4-27e2-0000f7073aab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/bin.sh","pattern":"[url:value = 'http://27.215.44.220:42289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bfb37ce-3259-a8db-9db0-0000d52f757f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://43.252.159.78:57590/i","pattern":"[url:value = 'http://43.252.159.78:57590/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1292aebe-e618-4928-e9ca-00001533f5a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/bin.sh","pattern":"[url:value = 'http://119.166.194.8:35798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af54194-cf21-25c8-d6c8-00002ad92d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/bin.sh","pattern":"[url:value = 'http://110.187.193.166:37676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2b67d0-53df-cbd8-9767-0000ffff7471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/bins.sh","pattern":"[url:value = 'http://voltagec2.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278ec3c4-1073-2db7-da75-0000880751bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86","pattern":"[url:value = 'http://voltagec2.tech/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5d85d1-37a3-2d5e-b7c2-00002b135b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/aarch64","pattern":"[url:value = 'http://voltagec2.tech/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ea5f2f-a5fb-7ac8-ac45-0000ba9b0ea6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm7","pattern":"[url:value = 'http://voltagec2.tech/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c357e4-cf93-0716-f4a0-0000ad0a65b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/aarch64","pattern":"[url:value = 'http://voltagec2.tech/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa8dd8c-120b-c7a4-9224-0000f0c2370d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.43.20:36177/i","pattern":"[url:value = 'http://123.14.43.20:36177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7e9908-8b12-1a9e-3c0e-0000ed5b7912","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.x86","pattern":"[url:value = 'http://api.mineblack.lol/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab939a43-f4e2-1303-5977-00006402d6f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/mipsel","pattern":"[url:value = 'http://205.237.110.232/tvt/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95e35f7-13d9-e3d1-52f7-00006a1f9e67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mips","pattern":"[url:value = 'http://64.118.132.61/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c78c14e-6d80-7b99-dff0-0000024dfa29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_64","pattern":"[url:value = 'http://voltagec2.tech/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211fdd-0ad8-b080-e9ba-0000f014fd77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm6","pattern":"[url:value = 'http://64.118.132.61/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e04f32-4cf6-9c58-b159-00000472c5f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.192.208:40793/i","pattern":"[url:value = 'http://219.155.192.208:40793/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a2b4c1-90f4-ceb2-40f8-0000dc6a1076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/i","pattern":"[url:value = 'http://42.4.25.20:34409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78dc129-90cb-2ef4-8d1a-0000820221b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm","pattern":"[url:value = 'http://voltagec2.tech/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02557625-7163-f4b3-161b-0000a894baac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86","pattern":"[url:value = 'http://voltagec2.tech/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--285eeb8c-1c2d-a870-3ac9-00002d00f1b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/i","pattern":"[url:value = 'http://42.52.204.44:32770/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c476f817-67ff-9572-6501-0000881c4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/bin.sh","pattern":"[url:value = 'http://42.4.25.20:34409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc77473b-6f58-9b79-79af-0000ad11727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/bin.sh","pattern":"[url:value = 'http://27.204.233.111:38853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6796781e-1fc9-7f37-883a-00001c440e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/m68k","pattern":"[url:value = 'http://voltagec2.tech/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96b817e-6b7c-1f6d-224c-000052e11187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_32","pattern":"[url:value = 'http://64.118.132.61/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d262f4b-e0e3-f666-0e30-000048a89a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm7","pattern":"[url:value = 'http://64.118.132.61/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d5b28b5-a91f-bfa2-5435-000096075fee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.arm7","pattern":"[url:value = 'http://api.mineblack.lol/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c458359-e5b6-ea2a-38e3-000081032e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc","pattern":"[url:value = 'http://64.118.132.61/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc25674-955e-6b64-c4fc-00003e05dc93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm7","pattern":"[url:value = 'http://voltagec2.tech/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e105ba2d-7836-2da4-b3ae-0000aaa32241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://121.5.26.199:9696/linux","pattern":"[url:value = 'http://121.5.26.199:9696/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff95c4b-6b6d-8dbd-8b87-00005ad67fa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/tuess/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/tuess/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6c70ca-43a7-595c-89e1-0000037502d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://seniorsushi.com/PPK/RAWFILES.exe","pattern":"[url:value = 'https://seniorsushi.com/PPK/RAWFILES.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393701fa-c457-6081-a954-0000ed8327df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Volcano9.exe","pattern":"[url:value = 'https://rcf.co.mz/Volcano9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49aae566-8412-c9e1-839d-0000ad26bf2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/bin.sh","pattern":"[url:value = 'http://196.189.35.172:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebf63c4-e7f6-8a97-3c63-000077deed15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/i","pattern":"[url:value = 'http://196.189.35.172:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc00dd35-e11b-c19c-0f13-0000e240d94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/bin.sh","pattern":"[url:value = 'http://78.178.118.193:52357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25586b37-07b8-a479-4e00-000036ebdd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/bin.sh","pattern":"[url:value = 'http://182.121.179.166:53602/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c772fa8-5e54-8200-0b26-0000ff6095a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/sh4","pattern":"[url:value = 'http://176.65.139.196/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb2d9d88-9b83-34b1-4991-00009a60a77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmpsl","pattern":"[url:value = 'http://176.65.139.196/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67bf6573-9003-11e8-cfcb-0000e195a23f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/px86","pattern":"[url:value = 'http://176.65.139.196/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d36f97-2cbd-fba9-cca3-0000f1951fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pm68k","pattern":"[url:value = 'http://176.65.139.196/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5925cdff-0e54-81a4-9fce-00007fbe0c5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/ppc","pattern":"[url:value = 'http://176.65.139.196/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7497fc31-bfa5-def3-7ac6-000007bd622b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/x86","pattern":"[url:value = 'http://176.65.139.196/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a0d54bd-feb4-ff2b-2bcc-00009996cc4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pppc","pattern":"[url:value = 'http://176.65.139.196/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5fb6ea-0384-4aac-f03e-0000194855bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/psh4","pattern":"[url:value = 'http://176.65.139.196/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd80716b-a62e-b074-560a-00006b68aa25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm6","pattern":"[url:value = 'http://176.65.139.196/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c83aad-29f3-3779-fcb1-000095c01f71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/px86","pattern":"[url:value = 'http://176.65.139.196/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c8e71b-5f6d-f31e-a51a-0000608526c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pm68k","pattern":"[url:value = 'http://176.65.139.196/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9cc971-e491-d0eb-6c44-000042c4f46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm7","pattern":"[url:value = 'http://176.65.139.196/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eff5b41-eed9-cd65-6a13-0000f163c935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmips","pattern":"[url:value = 'http://176.65.139.196/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267d27f-bda5-a099-8ef7-0000cb033927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm","pattern":"[url:value = 'http://176.65.139.196/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce41a38-b784-a3b7-b3c1-0000c9442db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm","pattern":"[url:value = 'http://176.65.139.196/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4828f4-db8c-4bd4-6ac4-000063e1f976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm5","pattern":"[url:value = 'http://176.65.139.196/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67297807-2b51-6b6e-0b73-0000546d38de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/kla.sh","pattern":"[url:value = 'http://176.65.139.196/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8346ac84-d9c3-e8d2-d3d1-00008f47e131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/kla.sh","pattern":"[url:value = 'http://176.65.139.196/bins/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f28e934-f109-3a97-7279-00006d1de8f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/psh4","pattern":"[url:value = 'http://176.65.139.196/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31dc7ead-cb3e-8d69-e7f6-00001b0f412b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/sh4","pattern":"[url:value = 'http://176.65.139.196/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35362690-5587-b609-6f27-00000501ebd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm6","pattern":"[url:value = 'http://176.65.139.196/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1267b2-4d95-1319-8a26-0000eba9e352","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/m68k","pattern":"[url:value = 'http://176.65.139.196/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa361504-3499-237b-0b28-00000b709e55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.196/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914f4b3d-851b-6667-1f33-00002d2bf933","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm","pattern":"[url:value = 'http://176.65.139.196/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec95ad-c19d-8894-cc07-0000805c5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mpsl","pattern":"[url:value = 'http://176.65.139.196/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--324649d8-ae8d-639e-da03-0000c9e831fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm7","pattern":"[url:value = 'http://176.65.139.196/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42311606-e104-1bdc-63b3-0000bdbd8cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm7","pattern":"[url:value = 'http://176.65.139.196/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8741fd-a0ef-3a95-b72f-0000d3d4cd40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm7","pattern":"[url:value = 'http://176.65.139.196/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3f772a-1263-d339-7e43-000017b44438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm5","pattern":"[url:value = 'http://176.65.139.196/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--693cad34-b8b2-ce30-8452-0000e3d2b6a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/x86","pattern":"[url:value = 'http://176.65.139.196/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da65386c-e3d0-d25c-e871-00009ffc5e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/m68k","pattern":"[url:value = 'http://176.65.139.196/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9bf9e7-74c3-9d44-ac8d-0000fa78930f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm6","pattern":"[url:value = 'http://176.65.139.196/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63e5364-55ee-5467-7355-0000eb5f3588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mips","pattern":"[url:value = 'http://176.65.139.196/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2592a85d-2fcb-6234-93f2-0000e8cd3ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm5","pattern":"[url:value = 'http://176.65.139.196/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448920d1-0626-cf0c-9992-000079dd05cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm5","pattern":"[url:value = 'http://176.65.139.196/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7a0b63-0436-15e4-af9c-0000edc37104","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pppc","pattern":"[url:value = 'http://176.65.139.196/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2108da1-b771-b25b-0b39-0000bf568469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm","pattern":"[url:value = 'http://176.65.139.196/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96490cba-1fc6-d9f3-6a65-00009f0a88c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mips","pattern":"[url:value = 'http://176.65.139.196/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe4d3cd-7f5e-21d5-061d-00006073f01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmips","pattern":"[url:value = 'http://176.65.139.196/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4541794e-c70b-2938-0bd8-000071545698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm6","pattern":"[url:value = 'http://176.65.139.196/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448e9cfa-414b-9218-4f77-00009bd1d8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/ppc","pattern":"[url:value = 'http://176.65.139.196/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239bca73-1bc4-f28c-58f5-0000f409e68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mpsl","pattern":"[url:value = 'http://176.65.139.196/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9db60a-a3d9-9aa1-a14e-0000c5c02623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/i","pattern":"[url:value = 'http://78.178.118.193:52357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ae2653-07a0-b040-0607-0000683cd87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b07d08f-68e9-bdeb-875f-0000014349e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad85dc3-2dcd-ef38-41cd-0000e0821482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153449b0-ebb2-6fe7-f909-00003127bb52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/bin.sh","pattern":"[url:value = 'http://89.189.181.54:34451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0a9b0a-941d-9295-54a7-00008b817ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedf6783-5a3f-c786-174a-00002bd5d2fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc80765-0724-8f83-3c19-00006094903f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f46915-827e-dbb8-4238-0000e074c258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53cd915-2088-e902-efcf-0000910e2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b5e141-16ac-d056-6704-000079402791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69a777e9-ff79-d4bb-2697-00007a897792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49674a84-7268-0562-22b8-0000cb0aa5cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277012fc-d04c-1f8b-a31a-00006059ced2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba6d34e-9afd-db78-cf4e-00001bd2758e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79044b1d-d14c-130c-c50f-0000f4682723","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be8df69-fde7-bc5d-2285-00001b0106e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a809f73-5963-721c-474a-0000b9a08628","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a42031c-39b8-9e0d-db25-000052b56cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34600d7-383d-9112-5aad-0000e30f820d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569eb7db-f724-838d-fbf9-0000c9991915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cefefff-f826-77aa-728e-0000a3bd6185","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e70316-4770-415a-056a-0000f99ebe67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef43119-0184-2ab1-d97d-00009b0cec78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c4cd30b-b556-89e6-b181-00002d5c3134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea0477f-32ba-0e53-2f7f-0000c23510f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e6be45-9637-7b51-281f-0000b108ce6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1269adc-92e0-631c-81d4-000029466e26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bcf103-0470-0f08-f2f3-00003940d44f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af90c5d5-0642-9b94-1f22-000039b60295","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d1b45-4fcf-7dd6-42ce-000055a0bdba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be769a67-9d2e-54a0-31ea-00008b262e2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a431a2-75ff-b37c-445c-0000396cac72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb72316f-14db-d8fd-91df-0000cfabdeaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb247830-fbda-aaa8-649b-00000bf8b7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c4aba9-c266-214b-c0e3-0000f3254059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--addfdd8c-7203-16d6-150a-00003ea3d3f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--761c1ca5-563c-6afc-5ed6-0000d9b3db41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54212f93-28c4-e793-c37f-000055566b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfddbfd7-1324-918f-262f-0000e78f7aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/bin.sh","pattern":"[url:value = 'http://39.74.53.25:55617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--375ad0a8-0ce2-e23e-49e9-0000299b34b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7501f9-a2cb-edb0-a4c6-00007717b9cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227b60d5-9125-2cc3-a756-0000dd1e7144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd1d41e3-d0dc-b544-f69b-0000d5b63907","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6034b279-4219-590c-423a-000058112e9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--794c7000-bb09-0238-ab35-0000a423319a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb30a77c-60be-47be-a5ad-00006e02cea3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce99958d-3e8b-d1c2-6e1f-0000987e980c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356044d6-303c-da27-0702-0000a4d5e740","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b0eeee-f1c6-b0d0-5dd1-00005c96d50b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9503d77-8b77-ada7-13a4-0000a44b2288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da335a2a-486e-fb42-80fd-00003e28528a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9eb6c9-3fc3-ad4e-1a44-0000cf205fd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c2aa6-7ef1-ac2f-3b5c-00002435b527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e20cb9-5dd5-1ae9-2c82-0000dc484cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c888a7b-d19e-5bd0-29fd-00008eddb990","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433a0b90-9b72-95d0-67b1-00002c9dfd64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad346abc-4f56-4037-5cf8-0000869435ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd8fec8-c0c9-6a00-3f5c-000069fd142c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1788505c-df93-62bb-5f7b-0000c808c42b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b183114c-94ac-ed40-ffe6-0000aa9ec031","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6aa504-a7b5-b8ba-32d8-00008d682d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4477cbd8-0908-59f3-ac28-00009183cb78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1564c428-7937-cb52-113d-00002761e5e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c11cde94-be84-a5de-bd40-000005d6e19d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--140c8432-e154-a507-c7b1-000085c06520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ce185d-6a63-11d1-514f-00006ed58fd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d30ea42-56a3-4ac5-e96c-000005203747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ba640-5d28-208d-737d-000080085b29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9978e-0cf8-bfcd-db82-0000f80b355c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbb75d9-66c5-ce79-9e0e-000078d5acaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--563b3c4b-85f7-a715-6b87-00004a41b702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6263f4be-c355-7e73-ed99-00009fdd828d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fad5a1f-ad18-f209-8d35-00000b3fcb17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mips","pattern":"[url:value = 'http://176.65.139.234/rebirth.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd27035-cc01-cb57-81a1-00009134a807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm6","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37d0cfc-f2b4-d54a-780e-0000caa98d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.ppc","pattern":"[url:value = 'http://176.65.139.234/rebirth.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b178a3e-9adb-cb5b-3c2e-0000983c7839","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62feeab-985e-5aa9-682d-00004a7714a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.sh4","pattern":"[url:value = 'http://176.65.139.234/rebirth.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecf3d32-d547-4a20-56c4-0000b2aae321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.x86","pattern":"[url:value = 'http://176.65.139.234/rebirth.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84413fb4-7805-2df9-4e6b-00006f2448dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/tplink.sh","pattern":"[url:value = 'http://176.65.139.234/tplink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7f9cd6-bb6b-b804-dee6-0000603ca55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mpsl","pattern":"[url:value = 'http://176.65.139.234/rebirth.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd540a3-2eec-b840-a135-00002988cf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm7","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33816ec9-49c0-b32e-c286-00000bc91dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.m68k","pattern":"[url:value = 'http://176.65.139.234/rebirth.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45db218f-4d57-bd70-9683-0000838107e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm5","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d8d6c4-f8d3-b924-d3cc-00003dba43bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmips","pattern":"[url:value = 'http://176.65.139.229/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf4e212-5bcf-5f62-01d0-00003d4c9561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pm68k","pattern":"[url:value = 'http://176.65.139.229/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c893c-e55c-5331-523d-0000caffa550","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pspc","pattern":"[url:value = 'http://176.65.139.229/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--486806ab-e99c-475e-52f0-00003468b98b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/px86","pattern":"[url:value = 'http://176.65.139.229/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--430a100d-233b-207a-cacb-000056b92df1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.229/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1088d532-9448-d45a-6e61-0000ccb54e08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/psh4","pattern":"[url:value = 'http://176.65.139.229/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65da3765-44b3-8dd1-bcd5-00004c6bd7fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pppc","pattern":"[url:value = 'http://176.65.139.229/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a7fcee-1698-d274-7195-0000a7b120ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm6","pattern":"[url:value = 'http://176.65.139.229/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb0b1a7-3d62-6b2a-8118-00001efe2293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm","pattern":"[url:value = 'http://176.65.139.229/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a0cc78-f174-de9a-213c-00001f0d47ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm7","pattern":"[url:value = 'http://176.65.139.229/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccaead54-e217-4e99-5db0-0000b5048f45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm5","pattern":"[url:value = 'http://176.65.139.229/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5ba16c-7f72-0ba3-524f-0000fe1e7292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/cat.sh","pattern":"[url:value = 'http://176.65.139.230/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626c3519-e931-1a90-b380-000001b432f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/telnet.sh","pattern":"[url:value = 'http://176.65.139.230/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517b373a-c47d-8ce0-ae64-00008a5a2d39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv4l","pattern":"[url:value = 'http://176.65.139.226/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e56560-53e6-c1f7-3b98-0000744b07c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.i486","pattern":"[url:value = 'http://176.65.139.226/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4860067b-6caf-49e1-bed3-0000b73a0489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv5l","pattern":"[url:value = 'http://176.65.139.226/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4a79f8-c3cf-88bb-1f00-000027550d7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sh4","pattern":"[url:value = 'http://176.65.139.226/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--634d55b8-c7fa-63fa-ac7e-0000f09a7e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv6l","pattern":"[url:value = 'http://176.65.139.226/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a5664f9-9854-519e-38e5-0000cdfa57e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv7l","pattern":"[url:value = 'http://176.65.139.226/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d90b10-0eb7-053c-7150-0000f4ab55a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.m68k","pattern":"[url:value = 'http://176.65.139.226/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf76a09-a770-24b7-810d-0000476c9aa8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.x86_64","pattern":"[url:value = 'http://176.65.139.226/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4fbca8-10fa-e575-5c0c-00008d0ef4be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/cat.sh","pattern":"[url:value = 'http://176.65.139.226/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117cb335-bc66-1bdf-90a3-0000408da2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/telnet.sh","pattern":"[url:value = 'http://176.65.139.226/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d8425-95f1-7d83-65d2-0000ebaee0d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sparc","pattern":"[url:value = 'http://176.65.139.226/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9474e9d-1a54-10cc-1aba-000087ffd84c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsrouter","pattern":"[url:value = 'http://176.65.139.226/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ca306a-3c01-dab4-3194-000015c116d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.arc","pattern":"[url:value = 'http://176.65.139.226/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102c0c7c-0b71-3605-4e68-000037f0f765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.aarch64","pattern":"[url:value = 'http://176.65.139.226/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449920a8-5765-6f2e-9f01-00003f4a4670","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.powerpc","pattern":"[url:value = 'http://176.65.139.226/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df53fc6-f9fe-43c5-55d9-0000f45d837e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mips","pattern":"[url:value = 'http://176.65.139.226/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3691706e-e50d-c8fe-6793-00001e087996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsel","pattern":"[url:value = 'http://176.65.139.226/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51159c22-cba8-2aca-1bcc-00007f96f68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.aarch64","pattern":"[url:value = 'http://176.65.139.230/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5a9fed-222b-b817-3be2-0000282b2878","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.arc","pattern":"[url:value = 'http://176.65.139.230/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf5e34c-6113-9365-4bb5-00003572979d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.i486","pattern":"[url:value = 'http://176.65.139.230/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1281c011-011f-3628-3e4f-0000b8d7e803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/i","pattern":"[url:value = 'http://182.121.179.166:53602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec5c4fb-c8f2-a98f-0ae8-0000097ffd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d145ba-5237-5acb-8f62-0000406567b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56913139-bd9a-7fc6-2b3b-00009e993f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6b2c4a-1c84-1020-f610-00006a2a9e0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_213534.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_213534.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--737476d2-4323-61c4-129c-00005476cfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.30/mb/crypted.ps1","pattern":"[url:value = 'http://217.60.241.30/mb/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03336b5d-426d-1e23-542c-0000a9cb2b34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8787254-3372-f73b-387c-0000dc142150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1186804b-9940-bc13-696e-0000b7e199c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcadee3-a94a-eef6-54c7-00003bd8e813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72c0c84a-d105-d74c-4590-0000113cd23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ad4879-ec26-0aa5-0037-00003f910c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f27e0ef-fe1a-c4e2-faeb-0000adbc94cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/gpon","pattern":"[url:value = 'http://176.65.139.242/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a159310-de51-abdb-58d3-0000dfe1dbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33a738de-5733-f82e-51e1-00002c4cd717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26810e4c-0f3d-16b2-deae-000089caaf14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check1.sh","pattern":"[url:value = 'http://176.65.139.211/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55e9ec6-4d39-d98c-38a0-0000024574fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check.sh","pattern":"[url:value = 'http://176.65.139.211/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86b9dfc-17b2-72aa-1231-000056278345","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto1","pattern":"[url:value = 'http://176.65.139.211/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c2c114-75a5-d7d6-03cc-000048d20bd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa2d975-8383-086d-44d0-0000ce6e5358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva.sh","pattern":"[url:value = 'http://217.60.195.187/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ca5c95-7e78-1079-c6ba-000062110617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.211/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae7aec13-0899-a33c-f40e-0000a80d7ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4faa581-9010-d376-48e7-00009a996743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db610d1-26be-f49f-d9b0-000010fd1e6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac1a7618-931e-e7f5-3736-0000624490c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db74e141-42e3-f131-600f-00009523d50a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6953db11-d990-3b78-e5bc-0000793c901a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7440b-c1b0-0302-190e-00004fef47ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c53b749-8692-d502-e1b2-0000d2dbcbcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14f717e-dc56-c621-2276-00007a5e1493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/gpon","pattern":"[url:value = 'http://176.65.139.243/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad06ab9-f774-f546-d767-00002738d1c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/dddd.sh","pattern":"[url:value = 'http://217.60.195.187/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dc56bf-c403-b6e9-4afb-000059f098c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto","pattern":"[url:value = 'http://176.65.139.211/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0793a331-e21c-253a-3b3d-00003df3e7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.211/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b12e49-2c20-c8e8-6a79-00003c5c7952","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e223d12-aa3c-544b-b140-0000545c3b74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4d9be0-3cea-6b26-9c00-0000c74cfbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eac564d-c8c1-63e8-22e3-0000bfb54e12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a847d6-34ac-861f-5832-00001a47feb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8886e21-c28d-2a87-f029-0000d5e424fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad70f7f-bcfe-9c86-2ea0-000034f43111","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e18687-0600-f9ac-0de4-0000aad8a5b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bf416b-15b8-0a7d-8df2-00000248b182","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fe15b1-97c2-45b1-9621-00005d5ae804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c06b41-190d-f829-e8be-00009843d292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ccccc46-504f-d1af-637d-000075fca239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c2d01eb-b6b5-ab42-97f4-00000d051787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a45af7-e8e5-2933-6c76-0000d512f220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.97/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131e6783-79d7-ed4e-20d3-0000c7b62067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbf4f65-5fd9-48b4-723a-00009655b1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98b0045-79f8-6177-c2e5-0000f84d50d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf0749d-a6f6-8cf0-88e3-0000f753208f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb952cec-ba4b-dd8c-39d1-0000edda60b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b871fd-ad4e-fbbc-bb8e-0000baf4d6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ca332-1ec3-3a65-0ac0-0000af0a44c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traff","pattern":"[url:value = 'http://176.65.139.211/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b6ca8-fd23-bbe6-9d8a-000046e9949a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ffaa2e-87b9-a28d-2339-0000bf4f95d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c154e589-111c-4b06-0306-0000559df724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bec5f97-1f24-a45c-40f1-000098b50448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d597cc0c-ad65-34d2-b145-0000f44822ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/nvidia.sh","pattern":"[url:value = 'http://176.65.139.211/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a45b3d-106f-506e-6682-00005031d015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664c85d4-c5e3-510d-0af1-00004768b991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4544682-7cb5-2666-c2e3-0000dce2f78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5aa8e8-9a14-32ac-6e5a-0000bee74ab0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3eb610f-a267-0cdc-2453-0000b4146376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b364d0-98db-c494-b5d8-00002a063c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.97/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17f95a8-645e-182c-b0f3-0000ef915b65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/loli","pattern":"[url:value = 'http://176.65.139.211/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ef541d-27b5-49ab-3f74-00000eea1262","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/gpon","pattern":"[url:value = 'http://176.65.139.241/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c1173-41a3-96e4-d1ae-000093c5adc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/bolts","pattern":"[url:value = 'http://216.9.226.120/nuts/bolts']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6105def3-eff4-86d1-431f-00002c259458","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traffaarch","pattern":"[url:value = 'http://176.65.139.211/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63b0031-b36a-2264-72af-000060d4238b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71441c24-3e49-33c2-3d57-00005cf47337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a212ad88-1f0e-45fe-d05b-0000f340bcd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e332d42-6989-2c2c-8e68-0000189227e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702c5c3e-69a0-20e0-db04-0000fe55f3ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc755d9-e9e1-7923-fb34-0000b4e2b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb87ff3-57a9-8e5f-b916-00002ee9d6bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ec41b2-93a8-afc2-c48e-00007272bfe2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/gpon","pattern":"[url:value = 'http://176.65.139.237/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab062688-85a7-5a6e-6049-000031ed292c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/gpon","pattern":"[url:value = 'http://176.65.139.238/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a23c6e9-b808-ab6f-d559-00006d82af21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/1","pattern":"[url:value = 'http://176.65.139.211/1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d031e7-90d1-cd51-1525-00001855562f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d24bb0-c74f-3384-54e7-00004a789eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/poop","pattern":"[url:value = 'http://216.9.226.120/nuts/poop']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9f6898-daaf-23c9-208e-0000cae2c311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i468","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5362f242-6b48-8d5d-3169-0000025e9f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86_64","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9466f47e-ef86-d548-c02c-00007e18e0b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mpsl","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ce9269d-b950-7f88-9f84-00001bb5b799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211:3000/watcher-script-aarch","pattern":"[url:value = 'http://176.65.139.211:3000/watcher-script-aarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc862c46-31e6-2743-b8d9-0000bd8bf9ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc280b-6f8f-b958-6511-000037ac8a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm7","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d980661-aa84-fca4-071b-000015ed5824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.m68k","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ecaa84-ef7d-67a2-9b6e-0000ef1e0cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.ppc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d076c802-b5a7-bbf7-f428-00004db7185f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f720bc7f-c107-ecc7-d4b3-0000d8c5ab48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i686","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d726ace7-c302-95c9-3cf3-00008864f544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86_64","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cb189d-6ebf-0425-bbf3-00008f10edee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm6","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be48d3-d05b-f189-07c5-00006fc09530","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.sh4","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b3e0141-44b8-2d11-e490-00005d548e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b432b7-16a5-3299-66be-0000151b8efe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mips","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06aa14dd-fd09-a00d-05ce-0000698a7e68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.spc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b04ebe21-6d48-0f51-0bce-000026db8668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/main","pattern":"[url:value = 'http://176.65.139.211/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3198157f-65d2-2cf0-a32a-000062ba9790","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/boss","pattern":"[url:value = 'http://176.65.139.211/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cca0c2f-b0d1-e5fe-b353-0000106320ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cliaarch","pattern":"[url:value = 'http://176.65.139.211/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e289c-a8e8-c769-8548-000081f4a7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/Error84","pattern":"[url:value = 'http://176.65.139.211/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7c2075-9fc5-fedd-aee0-00006a7bf68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cli","pattern":"[url:value = 'http://176.65.139.211/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--295e9b4a-6a49-5b6e-4836-0000971d62b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc24927-5c7f-4348-5685-00009da54200","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm5","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f9b45c-c050-c494-3e56-0000d518b38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://alphalkenya.com/VSooNlFLuZpdMiw.exe","pattern":"[url:value = 'https://alphalkenya.com/VSooNlFLuZpdMiw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fcf339-8e5b-3d26-cd82-00005456974f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/bin.sh","pattern":"[url:value = 'http://125.44.47.23:54371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2d5273-9c90-4ea1-9ad3-00006f93f078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/bin.sh","pattern":"[url:value = 'http://115.56.161.81:37957/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42be4239-dc61-01cd-6b44-0000315a28ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8626ac-3baf-b08a-cb0f-0000e3114464","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183e0bab-8b68-7355-75e3-000003ce3357","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5202367-cbc5-3a76-f925-00003c29cf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22713f1-4205-fd0b-d2a9-00008495a872","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3027a46-7e78-73d9-97d3-0000bbbf445f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d48aff12-2576-3133-1982-0000759da528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2e424b-0cd7-71e0-612c-00009620079c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35aa1e37-b81a-9b5e-3e6f-00003710c3a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d740d0d-cc9a-3f72-5a1e-00001e681db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5e91a0-133b-4bdb-bb59-0000c987df7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50cab0c-5243-864c-0b66-0000b9299576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/dddd.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37eca06e-096c-d5b1-f8cd-0000b184b109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--615839db-33a5-8c9f-7738-00001e9ecb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc1f67c-e8b2-132f-a826-000007186018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://18.175.166.211:60101/linux","pattern":"[url:value = 'http://18.175.166.211:60101/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--838d77f4-b8a1-6b19-5bbb-0000b5cc8e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.172.100:60117/linux","pattern":"[url:value = 'http://47.236.172.100:60117/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e764f176-9507-ae48-6084-0000e3722416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.85.120:60142/linux","pattern":"[url:value = 'http://8.219.85.120:60142/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98818c07-9893-3ff4-acc3-0000fcb03742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://49.235.101.101:60147/linux","pattern":"[url:value = 'http://49.235.101.101:60147/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1119fa-4f99-d308-521c-0000bd953a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.146.147:60134/linux","pattern":"[url:value = 'http://47.236.146.147:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aa89a96-c66b-5697-e1e5-00005e4bc8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.28.220:60115/linux","pattern":"[url:value = 'http://47.236.28.220:60115/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea16e865-c949-31fe-daa7-0000d819803a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.84.42:60116/linux","pattern":"[url:value = 'http://47.245.84.42:60116/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41019f3-7ba1-68b5-6f3f-0000c543318f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.226.68.236:60128/linux","pattern":"[url:value = 'http://64.226.68.236:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7b97e-ba47-84cb-72cf-00009a1e4222","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.155.47:60149/linux","pattern":"[url:value = 'http://8.219.155.47:60149/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc21111-ec33-26f7-5ba8-0000cf210cb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.179.91:60122/linux","pattern":"[url:value = 'http://8.222.179.91:60122/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee44f491-2da3-4c90-e3b8-000009c636b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.62.229:60143/linux","pattern":"[url:value = 'http://8.219.62.229:60143/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb30aaaf-c51b-9518-3780-000054633bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.122.72:60123/linux","pattern":"[url:value = 'http://47.236.122.72:60123/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6570ce2e-3449-9205-97c3-0000c3d9a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.70.102:60108/linux","pattern":"[url:value = 'http://47.236.70.102:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3406ba-9384-fe22-ef2a-00004b516df0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.169.170:60119/linux","pattern":"[url:value = 'http://8.219.169.170:60119/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abede522-f11e-97df-b763-0000320d4ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.69.227:60133/linux","pattern":"[url:value = 'http://8.219.69.227:60133/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7963fb75-3bd5-99b2-6582-000085bfe7f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.210.218:60139/linux","pattern":"[url:value = 'http://8.219.210.218:60139/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89634012-fcdc-fc2d-c696-0000cf164dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.241.116:60106/linux","pattern":"[url:value = 'http://8.219.241.116:60106/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35afb323-1cf2-9297-9d13-000047fcfe20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.180.235:60136/linux","pattern":"[url:value = 'http://47.236.180.235:60136/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0283687-43b4-59ef-bd71-0000aca571d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.167.249:60128/linux","pattern":"[url:value = 'http://47.237.167.249:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c070d2-d5ac-1290-0d5c-0000ce201f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.127.21:60124/linux","pattern":"[url:value = 'http://47.237.127.21:60124/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb76b69d-bbb4-a850-b579-00000a44b3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.124.1:60108/linux","pattern":"[url:value = 'http://47.237.124.1:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796f68a8-f967-efed-76b0-00005334d469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.247.229:60132/linux","pattern":"[url:value = 'http://8.222.247.229:60132/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d3d13b-959c-957b-4e5c-00005bb138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.213.23.56:60134/linux","pattern":"[url:value = 'http://222.213.23.56:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a167b3c6-6f2a-8707-8d94-00007d6aa67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://114.67.87.14:60125/linux","pattern":"[url:value = 'http://114.67.87.14:60125/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc173701-1141-85df-1a97-0000e6600ad6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.111.51:60121/linux","pattern":"[url:value = 'http://47.245.111.51:60121/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f634381-17dc-6ef2-6199-00001b6e1852","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.13.23.149:6819/linux","pattern":"[url:value = 'http://106.13.23.149:6819/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1f8934-986b-df51-b591-0000b05d2639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/i","pattern":"[url:value = 'http://115.56.161.81:37957/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae682a-b664-477f-ab15-00005de6e9cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/i686","pattern":"[url:value = 'http://176.65.139.247/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42cbcf1-acaa-de2a-2048-00003ad8d1fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/bin.sh","pattern":"[url:value = 'http://125.42.33.2:54415/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3876b477-03d1-7e6a-fa1d-00009c0784f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mipsel","pattern":"[url:value = 'http://176.65.139.247/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b1a0e0-39c6-4966-fa53-00004ff5aa89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv7l","pattern":"[url:value = 'http://176.65.139.247/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23ae6e2-0353-c5b7-e482-00009038cc7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mips","pattern":"[url:value = 'http://176.65.139.247/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4687c262-2ed3-70ae-adb3-00003535f9e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv5l","pattern":"[url:value = 'http://176.65.139.247/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9cf323-5d8d-399f-745f-00000855d059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv4l","pattern":"[url:value = 'http://176.65.139.247/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba669a8-60d4-47bf-224b-0000a8979f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/i","pattern":"[url:value = 'http://125.42.33.2:54415/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb565646-1cb6-564a-bceb-0000ee88ba34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/bin.sh","pattern":"[url:value = 'http://123.5.124.6:35918/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537dec1c-63c6-692d-d455-00003d35ae88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.185.91.8:52353/i","pattern":"[url:value = 'http://123.185.91.8:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6def627b-17d0-efa9-1202-0000cbac34be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/i","pattern":"[url:value = 'http://123.5.124.6:35918/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71196feb-e48a-1c8c-349e-0000d7cfa536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/adb.sh","pattern":"[url:value = 'http://129.121.110.105/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0afd49-ee0a-92c5-80f6-0000cafa85f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/adb.sh","pattern":"[url:value = 'http://92.38.167.76/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddfcc0a-9f72-562a-2f8c-000088c29792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/fSegv","pattern":"[url:value = 'http://94.154.43.102/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79490fed-6025-4260-844c-0000ddd4e3df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/Sgsa","pattern":"[url:value = 'http://94.154.43.102/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0bc1ea8-e091-cea0-538a-0000358b89ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/adb.sh","pattern":"[url:value = 'http://94.154.43.102/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90437c8c-2e5d-e8fc-291d-00007006810a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/adb.sh","pattern":"[url:value = 'http://129.121.114.124/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0580ead3-b6fc-1939-6aab-000032905684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Sgsa","pattern":"[url:value = 'http://129.121.110.105/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7849670f-b1a8-1d4a-cefb-0000da9606bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/fSegv","pattern":"[url:value = 'http://129.121.114.124/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc21844-6b63-1310-4570-000074945b5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fSegv","pattern":"[url:value = 'http://129.121.110.105/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5331b9-6d0e-728f-2d57-00000ac687d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/Sgsa","pattern":"[url:value = 'http://92.38.167.76/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81bf43d9-42b4-afbd-0b74-0000f6a4f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/fSegv","pattern":"[url:value = 'http://92.38.167.76/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a88825-648e-d837-0d60-0000e1a7f86c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Sgsa","pattern":"[url:value = 'http://129.121.114.124/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7cdd8cd-383c-fa28-4896-0000c135b140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/jaws.sh","pattern":"[url:value = 'http://93.114.194.171/d/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b749ccd9-bb0f-b2e8-32ab-00001e612ad0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/toto.sh","pattern":"[url:value = 'http://93.114.194.171/d/toto.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5adc3f-2443-b6dc-920e-00007d72d576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/sharp.sh","pattern":"[url:value = 'http://93.114.194.171/d/sharp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--983d8eae-9158-2000-3017-0000daf8cc88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/coke.sh","pattern":"[url:value = 'http://93.114.194.171/d/coke.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8232286c-2a63-1e0e-6ea0-000020318842","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm7","pattern":"[url:value = 'http://93.114.194.171/d/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f70335-2fa3-54fb-11f4-0000de22564f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/aarch64","pattern":"[url:value = 'http://93.114.194.171/d/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b862bb-58ac-e1ae-492b-0000af0c6690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mipsel","pattern":"[url:value = 'http://93.114.194.171/d/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b6dd47-6be7-92f5-2dae-000097377335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm","pattern":"[url:value = 'http://93.114.194.171/d/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3c4940-8e3b-87a8-0355-00008a3840c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm5","pattern":"[url:value = 'http://93.114.194.171/d/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d9b65d-2333-c683-9c47-0000dd829b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/nigger/arm5","pattern":"[url:value = 'http://205.237.110.232/nigger/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82980241-9799-eae2-3a05-000049ccdb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/i586","pattern":"[url:value = 'http://93.114.194.171/d/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bca0fb2-4a1e-552e-6897-0000ce8558ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/aarch64","pattern":"[url:value = 'http://205.237.110.232/no_killer/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f4d128-c968-3a15-f294-0000e0db903b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/proxy/mipsel","pattern":"[url:value = 'http://205.237.110.232/proxy/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d446f94b-1b1f-82a9-32e0-0000d278990a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/mipsel","pattern":"[url:value = 'http://205.237.110.232/no_killer/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b84d023-7107-7c6d-86ac-0000a5903fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/gpon","pattern":"[url:value = 'http://176.65.139.236/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f14caf9-d8b5-f510-3f07-000065ace6d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/adb.sh","pattern":"[url:value = 'http://64.118.132.61/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4d1fd4-11ae-2388-b27c-0000bbc1eb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/test.sh","pattern":"[url:value = 'http://64.118.132.61/test.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f79013a-96d4-15cc-ba03-0000ed48ddae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/yarn","pattern":"[url:value = 'http://36.255.97.21/yarn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62705e3e-0671-8573-b7cc-0000aebe8cb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/o.sh","pattern":"[url:value = 'http://62.84.172.106/o.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--919a8313-30e7-177a-d68d-0000ea62e9c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/goahead","pattern":"[url:value = 'http://36.255.97.21/goahead']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfb3bf0-d94f-117e-4d4a-0000576ff2be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zyxel","pattern":"[url:value = 'http://36.255.97.21/zyxel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cdc2a9f-b341-0192-fada-0000e237e8f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/x","pattern":"[url:value = 'http://72.56.52.158/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12f69a36-c470-e2a0-5ba0-00000be0e927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/pulse","pattern":"[url:value = 'http://36.255.97.21/pulse']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faf3284-1d99-a37e-272c-0000b9531c85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zte","pattern":"[url:value = 'http://36.255.97.21/zte']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3322a585-e449-0a80-efe7-0000159895be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/huawei","pattern":"[url:value = 'http://36.255.97.21/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b29599-5e9b-9090-a1f7-00002fed6a4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/realtek","pattern":"[url:value = 'http://36.255.97.21/realtek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7600a0c-892f-87a4-e5e8-00004a3135ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/hnap","pattern":"[url:value = 'http://36.255.97.21/hnap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00131cc-8bdc-a54a-3563-0000dd991d7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.29.95:46111/bin.sh","pattern":"[url:value = 'http://182.119.29.95:46111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baacf6-7cfb-d7c0-f40c-00006c39e34f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/run.sh","pattern":"[url:value = 'http://91.92.40.13/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c760f8-a56a-43c6-5b15-00002f5c5b27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751f81cb-3131-0e04-034e-0000c61c9885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd359e7-b922-d4d2-3785-00002c78e6b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f96e00f7-e956-9567-a0fe-0000eef76c5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.armv5l","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd41fd2-f15e-9fb1-689c-0000369fbc2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm5","pattern":"[url:value = 'http://64.118.132.61/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d3395a-49f2-e9f1-c501-00008403e01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/sh4","pattern":"[url:value = 'http://64.118.132.61/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7681db0d-deec-c717-2a76-000004dd79e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc","pattern":"[url:value = 'http://64.118.132.61/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21de601d-202c-da8e-fb65-0000e41ee1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/mips","pattern":"[url:value = 'http://93.114.194.171/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b24c38-4f84-26d1-a9ee-0000a7ad232c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mpsl","pattern":"[url:value = 'http://36.255.97.21/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5273bb06-bc95-9dd7-9a5b-00003ec66ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/lg","pattern":"[url:value = 'http://36.255.97.21/lg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77538561-7ae9-6794-9ffd-000009f5888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/dmpsl","pattern":"[url:value = 'http://93.114.194.171/dmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2179aafd-0eb2-eaaa-d0e6-0000345b38f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips","pattern":"[url:value = 'http://62.84.172.106/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c16f161-6f87-762c-2147-000044108198","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm5","pattern":"[url:value = 'http://36.255.97.21/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dad9e56-fae9-ea28-1b01-0000dbe26f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm7","pattern":"[url:value = 'http://62.84.172.106/sys64.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e751f83-6588-f0f7-a5ba-0000fa306b24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86_64","pattern":"[url:value = 'http://62.84.172.106/sys64.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4a04eb-afd5-427a-2689-0000a3a417ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d594fb-de71-0933-5abf-0000ae73b0f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592273c0-9d23-8f61-ef8e-0000b4abb866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b53c7e-8cbe-8345-c54d-000062e13e09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08afd0cd-db35-3cea-a463-0000aa503bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5f746b-6ea9-d7ad-bfb2-000000739102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dd4e68-3685-6cbf-e6c7-0000242a13c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm6","pattern":"[url:value = 'http://64.118.132.61/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b6b42-e69d-0dc0-e31d-0000c6b60669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc440","pattern":"[url:value = 'http://64.118.132.61/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a1701-02ea-c02e-22da-000010e24273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mips","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879f76e2-6fba-fe45-8186-000047c51142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mipsel","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98e5094-76f5-d411-0358-0000bed7a608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/m68k","pattern":"[url:value = 'http://64.118.132.61/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcef2775-2dff-85cc-61b6-00004c3ca265","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e131505-fa9a-5798-52b7-000041b62001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a26442-9871-651b-656a-0000be2170d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mips","pattern":"[url:value = 'http://64.118.132.61/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0070a28b-e356-3794-9c23-0000d5221e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mpsl","pattern":"[url:value = 'http://64.118.132.61/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0259887-6c89-db48-1aa0-0000e2909c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/aws","pattern":"[url:value = 'http://36.255.97.21/aws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fd16d-5bd5-c346-7841-0000bce5f409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm5","pattern":"[url:value = 'http://62.84.172.106/dlr.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f20cb4-9a4e-53ac-b48e-0000c927cf27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.114.194.171/mips2","pattern":"[url:value = 'http://93.114.194.171/mips2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c974e084-1fda-8b3c-bef6-00001b5cb0f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.ppc","pattern":"[url:value = 'http://62.84.172.106/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c64b5f-8d24-8437-dbdf-0000f21cdd8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68712d2c-102b-e95d-9b14-0000c209e107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.ppc","pattern":"[url:value = 'http://62.84.172.106/sys64.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0326cb1f-1cc9-b9f7-4f3f-0000190f2a98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/thinkphp","pattern":"[url:value = 'http://36.255.97.21/thinkphp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ab6c34-7a1e-eaf5-e2a1-00005f5856bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mpsl","pattern":"[url:value = 'http://62.84.172.106/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65767527-7281-4c72-f015-0000225a4c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/wow","pattern":"[url:value = 'http://205.237.110.232/wow']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f410a22-c19c-0afa-4e77-0000348b4e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.i686","pattern":"[url:value = 'http://62.84.172.106/sys64.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fbb6ab-a46d-3cdc-89a1-0000b9abd5b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86_64","pattern":"[url:value = 'http://36.255.97.21/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151fa0db-f958-027c-267e-000056a52e76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm6","pattern":"[url:value = 'http://36.255.97.21/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d23cf7b-413f-4ea7-0719-000042d778f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.sh4","pattern":"[url:value = 'http://62.84.172.106/sys64.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028d648f-f60b-3360-b0c2-00008c87482f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.ppc","pattern":"[url:value = 'http://36.255.97.21/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d584ea-1ccc-6617-3f9f-0000f9556b35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mips","pattern":"[url:value = 'http://62.84.172.106/sys64.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abd5e38-3955-7b8a-0fe1-00004fe64ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2602d3-3cf2-790b-9f9f-00009b822904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sh4","pattern":"[url:value = 'http://62.84.172.106/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fcfb21-6464-5981-4db8-00008ebaef9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/gpon443","pattern":"[url:value = 'http://36.255.97.21/gpon443']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d24e437-96f3-3f82-fb7e-0000d343649f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.aarch64","pattern":"[url:value = 'http://62.84.172.106/sys64.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d559e2b-4e2d-20b5-00b7-000034adee2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.m68k","pattern":"[url:value = 'http://62.84.172.106/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a3ff7a-7617-e170-5959-000071eba7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm5","pattern":"[url:value = 'http://62.84.172.106/sys64.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e608340-8645-0fcd-6ec8-0000d9f062c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips64","pattern":"[url:value = 'http://62.84.172.106/dlr.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7204e76-7eeb-4a8e-5f99-0000f19e13a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86_64","pattern":"[url:value = 'http://62.84.172.106/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c31ce2-36da-e6c0-39cf-0000ba0a8f72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86","pattern":"[url:value = 'http://62.84.172.106/sys64.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4cbe27-2d72-f7d2-c42f-0000cc589bbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.m68k","pattern":"[url:value = 'http://36.255.97.21/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b252936c-5e1b-7647-2e53-00006ab29e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://72.56.52.158/ass","pattern":"[url:value = 'http://72.56.52.158/ass']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c074223-403c-6d60-4de6-00009256057f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mpsl","pattern":"[url:value = 'http://62.84.172.106/sys64.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1edb610a-cd55-4249-b4c4-0000940691dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/i586","pattern":"[url:value = 'http://205.237.110.232/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820680d7-e9d9-b01b-37ab-0000ae505be7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm6","pattern":"[url:value = 'http://62.84.172.106/dlr.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f9b03c-82e3-f4dd-f6b3-0000f9a3bdef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.m68k","pattern":"[url:value = 'http://62.84.172.106/sys64.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77df86d8-88bc-9fb6-c22c-00000c59d1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.sh4","pattern":"[url:value = 'http://36.255.97.21/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--011e6646-649c-644f-5a01-000049c9459f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm","pattern":"[url:value = 'http://62.84.172.106/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01babee-1254-9eab-2526-0000909c146a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm","pattern":"[url:value = 'http://62.84.172.106/sys64.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aaaaec0-833d-9321-0920-0000635e0825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm6","pattern":"[url:value = 'http://62.84.172.106/sys64.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae7e24d-981d-9ba2-cca8-0000de12bd42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm","pattern":"[url:value = 'http://36.255.97.21/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ed2435-e7a4-70e3-89a0-0000f9851d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.i686","pattern":"[url:value = 'http://62.84.172.106/dlr.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33aae194-c17b-31f7-3397-00007f0addea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sparc","pattern":"[url:value = 'http://62.84.172.106/dlr.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6608af1-5039-2c21-fd26-0000ccae4d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mips","pattern":"[url:value = 'http://36.255.97.21/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2518fa67-3867-101a-70e0-000044d1094f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2aaed","pattern":"[url:value = 'http://5.182.210.174/d2aaed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826cfda4-8953-6971-73d4-0000cf110213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9da0b2","pattern":"[url:value = 'http://5.182.210.174/9da0b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f2c4761-af58-2adb-e4c0-0000308351c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0b3b49","pattern":"[url:value = 'http://5.182.210.174/0b3b49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ad4ad6-d2d8-d34b-ba9c-0000df837414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7f80fa","pattern":"[url:value = 'http://5.182.210.174/7f80fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a710c0bb-afbd-45f4-9eb9-0000eb3093d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7addc","pattern":"[url:value = 'http://5.182.210.174/e7addc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--602719b8-9070-a51c-5c99-00000131f615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6337f1","pattern":"[url:value = 'http://5.182.210.174/6337f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--158d70d7-d8ec-841d-6e77-0000c086e065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d7d14","pattern":"[url:value = 'http://5.182.210.174/2d7d14']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e2d9e6-6e1b-9187-cb39-000047e7148b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110181","pattern":"[url:value = 'http://5.182.210.174/110181']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c7d369-c8c8-32eb-002f-00001c6574a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7e44c2","pattern":"[url:value = 'http://5.182.210.174/7e44c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc705f63-abaa-4e1e-2dc0-0000d3c100bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b4efc0","pattern":"[url:value = 'http://5.182.210.174/b4efc0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2695dc-f840-3941-1289-0000aede72d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76341d","pattern":"[url:value = 'http://5.182.210.174/76341d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29fba434-da58-0cad-e2e0-000037105ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83c238","pattern":"[url:value = 'http://5.182.210.174/83c238']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b7af0c-1f79-33e5-05ac-000081f63a37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/meow.sh","pattern":"[url:value = 'http://176.65.139.247/meow.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a6ddf5-9b69-11bd-5bd7-00004c5a4972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/bin.sh","pattern":"[url:value = 'http://110.37.23.183:58054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f200c0a-4aa7-7dd8-39ee-00006e3aafc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.120:42203/i","pattern":"[url:value = 'http://42.4.25.120:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c3346b-8b62-d123-07a1-000009b30170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcd08642-af7a-04e9-941a-00006c62f1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9126cf-8d9a-6701-f011-00002a53b45b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/o.xml","pattern":"[url:value = 'http://176.65.139.247/o.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57410444-3f89-02b8-8bd4-0000e652d4e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/peak.sh","pattern":"[url:value = 'http://176.65.139.247/peak.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36369c38-f3a4-80a3-2cc4-0000cc40a13f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/hypeman/agent.bin","pattern":"[url:value = 'https://sumiko.vu/hypeman/agent.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78fae22-ff48-1a29-2d74-0000823cd831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ae66fb-f1f3-cb12-1949-00004f2e9b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta","pattern":"[url:value = 'http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--101db2df-de6d-124f-693b-0000c7569750","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://144.172.107.214/29/goodthingsforbestpersonforme.hta","pattern":"[url:value = 'http://144.172.107.214/29/goodthingsforbestpersonforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc5158e-9329-02f2-a2b2-0000c366a3b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4710c3-3f44-974f-70c0-0000c5e5ab4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta","pattern":"[url:value = 'https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25d34e0-6dde-d7a4-ceb9-0000f3644b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/bin.sh","pattern":"[url:value = 'http://42.233.106.94:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--403d16e4-170e-d1bb-fce3-00001e6dc454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff5caac-04cb-1e9b-f575-0000d8d6d8a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta","pattern":"[url:value = 'http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa2541f-b503-6eb5-c85e-00000503fb0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b8a963-b760-aed0-db21-000004980c4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_041741.png","pattern":"[url:value = 'http://107.172.172.254/img/img_041741.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02d2ec1-9d6e-da6f-5b6c-00002ac3ec70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/bin.sh","pattern":"[url:value = 'http://222.141.47.192:60272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd1e4d7-437d-57e6-fbc4-0000b776b25d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/i","pattern":"[url:value = 'http://119.189.160.169:47495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a23851e-030c-701f-64ba-0000065dd622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/i","pattern":"[url:value = 'http://110.37.23.183:58054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf669434-eebe-35a2-4f7e-000066e8835e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/i","pattern":"[url:value = 'http://222.141.47.192:60272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c7a7aa-d1a2-bac5-d317-0000c4dfe082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/bin.sh","pattern":"[url:value = 'http://182.121.10.198:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb83254f-6048-2457-5cf5-000013f28d95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/ttues/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/ttues/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcea6f1c-0933-3a0c-0ea9-000043f06308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd6152d-ae4f-081f-f3fc-00009ce601b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/bin.sh","pattern":"[url:value = 'http://210.208.110.20:51485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a978c6-c4fa-fa9b-7a81-000029b84789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/i","pattern":"[url:value = 'http://42.233.106.94:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--583f19d5-85ff-aaea-e24d-000052523608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/i","pattern":"[url:value = 'http://182.121.10.198:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ecc24d-10de-3775-350d-0000dc44409a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/i","pattern":"[url:value = 'http://210.208.110.20:51485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d48cd89-69af-ccc3-a75a-00001cc1053d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/bin.sh","pattern":"[url:value = 'http://61.54.232.80:41350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc5dd0f-9252-68a3-67da-000020b28fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mukabar.co.mz/css/images/stego_oo8nser2q2.png","pattern":"[url:value = 'https://mukabar.co.mz/css/images/stego_oo8nser2q2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaa7152-4641-32b8-8b1b-00009b69bd8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.74/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.74/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0011c8-4514-a499-40d1-00003813a1ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.233.127:51731/bin.sh","pattern":"[url:value = 'http://115.57.233.127:51731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bca288a-fcde-0887-ece6-00003e385ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/i","pattern":"[url:value = 'http://61.54.232.80:41350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbc962b-c5b7-7e61-d13a-000025a23eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.108.151.84:39084/i","pattern":"[url:value = 'http://101.108.151.84:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78e9e3a-ffb1-581d-4e70-000038482c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/loli","pattern":"[url:value = 'http://176.65.139.195/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2d5d2d-606f-fed9-653c-00008e29ef3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto","pattern":"[url:value = 'http://176.65.139.195/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64c9e9f-b6a6-ecce-0abc-00009291108a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto1","pattern":"[url:value = 'http://176.65.139.195/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88a5be-9626-eaf3-d487-00000ba5d5d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/nvidia.sh","pattern":"[url:value = 'http://176.65.139.195/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e67fe-cd84-3b4f-5859-00007627587a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check1.sh","pattern":"[url:value = 'http://176.65.139.195/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17691eed-ef08-6e7d-fce3-0000b563e069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/boss","pattern":"[url:value = 'http://176.65.139.195/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad660299-e94a-c633-f5c1-000090536093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.195/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e80d09-765a-617d-1af5-0000e0d86a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check.sh","pattern":"[url:value = 'http://176.65.139.195/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c9fe0-6383-2c3a-b247-0000f2fe3e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cliaarch","pattern":"[url:value = 'http://176.65.139.195/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96bfb5b3-d008-d140-2b61-0000f102f191","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/main","pattern":"[url:value = 'http://176.65.139.195/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede7927d-cfa1-0012-e20d-0000d5462103","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/oldboss","pattern":"[url:value = 'http://176.65.139.195/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df75f65-a41e-10b6-635b-0000a4906a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/Error84","pattern":"[url:value = 'http://176.65.139.195/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06471e45-50ee-da4b-3c67-0000bedee16f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cli","pattern":"[url:value = 'http://176.65.139.195/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbba051-d36e-14d3-8a34-00006bbcd709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traff","pattern":"[url:value = 'http://176.65.139.195/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3ffd3d-261c-c3bb-9b5d-0000cfb1815e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.195/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c18e27bc-008e-d1a4-a232-0000e8f75e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/log","pattern":"[url:value = 'http://176.65.139.195/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4461133a-834f-a417-f8a1-000086d035f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traffaarch","pattern":"[url:value = 'http://176.65.139.195/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799cca24-7b32-0f05-2d53-0000039e4b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/wd1337","pattern":"[url:value = 'http://176.65.139.195/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b04d9f2-60a3-b8a3-97c9-000015a158d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/syst3md","pattern":"[url:value = 'http://176.65.139.195/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10dee19a-9984-45ea-060c-000022fc45e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/proot","pattern":"[url:value = 'http://176.65.139.195/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef9e2f9-eaa5-b0c3-a0a9-0000e64ad629","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/proot","pattern":"[url:value = 'http://176.65.139.211/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cddae0b-b7ef-f908-5135-000030c5951d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/syst3md","pattern":"[url:value = 'http://176.65.139.211/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3ee584-10bb-43e1-591b-0000f022ecca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/oldboss","pattern":"[url:value = 'http://176.65.139.211/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b5198c-f998-a1d8-f58f-00003c5249b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/log","pattern":"[url:value = 'http://176.65.139.211/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad39ddc5-53da-1412-1c32-0000088122f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/wd1337","pattern":"[url:value = 'http://176.65.139.211/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d677a4e-fad9-56e2-608d-00008874807e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07dfc050-05ca-b9b7-0353-0000455c7312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f403c114-9102-d5af-a8f9-0000a4b1f943","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3d3508-ea55-acfa-872c-0000003c9a5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--723464b2-1b44-e9d2-78bd-0000128935b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cd07c7-9b5b-192d-93e6-0000ca02edb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05335424-d0e6-495b-d22e-0000aa3552d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6947d6-6979-e0ce-4418-0000f6240c2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd16ad1-900a-7d03-9985-000016fb7b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b4e98-36af-c302-00b4-0000888256a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81512343-b6dd-af1b-2f1f-0000246f60b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b1f0da-efd6-9f2b-8a82-0000dcb29736","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64998851-7649-26ba-6e0b-0000e38138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b143e-6af1-aca9-97da-00000894d219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660dfa22-6dbe-bbfd-7e69-00005f5da2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/bin/support.client.exe","pattern":"[url:value = 'https://2.58.56.151/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--337bd4b2-6476-3f24-0698-0000102fc74c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05856de8-aaf6-44f0-1691-00001e06a6f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/bin/support.client.exe","pattern":"[url:value = 'http://124.198.131.176/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e336d9-5b33-86fa-8adc-0000c6316976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f42a3f-848e-9f93-337b-00000efa1d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.172.96.218:7777/coldcard_final.py","pattern":"[url:value = 'http://144.172.96.218:7777/coldcard_final.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df6b573-e7fa-b8c2-5756-00006fad9e1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.87:35915/bin.sh","pattern":"[url:value = 'http://219.155.229.87:35915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96880b4d-1703-7078-aafd-00008ca38972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.80.18:35873/i","pattern":"[url:value = 'http://115.57.80.18:35873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f90936-0b2d-55d9-aab9-0000c1332d7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.238.55:57598/bin.sh","pattern":"[url:value = 'http://119.116.238.55:57598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7c3901-6873-38b8-114c-0000a2839fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://14.0.131.161:51651/i","pattern":"[url:value = 'http://14.0.131.161:51651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2936138b-0172-a4c1-8eef-0000b74365ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://178.16.54.38/us01.zoom-connect-invites.us.zip","pattern":"[url:value = 'https://178.16.54.38/us01.zoom-connect-invites.us.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d61b99e-04ee-2ade-5caf-00000c499456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.236.173:58333/i","pattern":"[url:value = 'http://219.155.236.173:58333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c299eb98-4a51-41da-5830-0000332fade3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.241.208.90/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://185.241.208.90/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f4a534-2203-62da-d017-0000beb476ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/i","pattern":"[url:value = 'http://125.41.228.207:54336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a38cc4c-1ff2-09a3-d70a-0000c2bb11dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/bin.sh","pattern":"[url:value = 'http://175.173.53.215:46519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4690a98-2a72-49a3-67a5-0000c9f79d64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/bin.sh","pattern":"[url:value = 'http://123.8.45.230:53516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3227d6b2-caab-f035-b3ee-000040c4b810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.53:44835/i","pattern":"[url:value = 'http://120.84.214.53:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648af908-7bb5-e093-0086-0000327624b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/bin.sh","pattern":"[url:value = 'http://78.25.123.5:48319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a10d5e-4c07-33a6-8364-0000862baba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/i","pattern":"[url:value = 'http://78.25.123.5:48319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6300e8fb-b501-308c-32ec-0000db40a018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/i","pattern":"[url:value = 'http://123.8.45.230:53516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277938e0-4170-8ebc-45b1-000063d2e04a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/i","pattern":"[url:value = 'http://175.173.53.215:46519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1853b-c3b2-f39f-568c-00004db1f11c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/bin.sh","pattern":"[url:value = 'http://42.227.207.180:58373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--942b8d2a-c163-d3c4-7319-0000e33d994a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/i","pattern":"[url:value = 'http://42.227.207.180:58373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5800256-1fee-bd03-1711-000043c9f6bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8023e41-a6aa-9abe-f607-00002ae5d8e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e275b18f-66a4-d493-56d5-0000c3ae03bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/i","pattern":"[url:value = 'http://182.117.165.9:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f441c7de-fffb-a10e-1ca5-0000f6016def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/bin.sh","pattern":"[url:value = 'http://190.109.228.150:37896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebcd385-c5ca-4a0b-f6d4-00007b4af5b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe","pattern":"[url:value = 'https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f933c8-4920-ee72-d511-00005bc0ad87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efbcb0b2-459d-f944-9ce4-000014be3e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/i","pattern":"[url:value = 'http://190.109.228.150:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135cbdfc-3aae-cbd8-4544-00007b1e0223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/bin.sh","pattern":"[url:value = 'http://222.142.245.198:49568/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cdbd7-342c-6398-ee1f-00000a7d260c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.91.206.69:41124/bin.sh","pattern":"[url:value = 'http://59.91.206.69:41124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--084e0fe3-c304-fdc0-fdbf-0000492e5b07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/i","pattern":"[url:value = 'http://222.142.245.198:49568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4bf2ae-8c53-bd7a-fdce-0000e0142e88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/bin.sh","pattern":"[url:value = 'http://175.148.158.154:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a326f81c-eed0-3dc2-8363-0000ef22f151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/bin.sh","pattern":"[url:value = 'http://125.45.148.93:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1277b336-2c45-c79e-05dc-0000d519c57a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.251.225.122:36907/i","pattern":"[url:value = 'http://112.251.225.122:36907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be3cca41-83b7-25bc-b591-00009b54e1a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/bin.sh","pattern":"[url:value = 'http://163.142.93.187:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941c4229-1054-471e-79b0-000015a4499d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/i","pattern":"[url:value = 'http://175.148.158.154:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469b1137-8569-4de6-21d1-0000e156df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.7.234:37031/i","pattern":"[url:value = 'http://175.175.7.234:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfeface-530c-7f5c-8211-0000db112803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/i","pattern":"[url:value = 'http://163.142.93.187:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faeca1d-51c7-09e8-35c7-0000e0f3c4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/bin.sh","pattern":"[url:value = 'http://182.121.138.136:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fdcdc0d-2229-c247-5c01-00005e46c21e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/bin.sh","pattern":"[url:value = 'http://42.224.175.231:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1155b79c-8b67-6771-2699-0000b0fa992f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/bin.sh","pattern":"[url:value = 'http://221.15.141.166:50250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61055ea5-53b3-4a5b-aca6-00007f975e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/i","pattern":"[url:value = 'http://182.121.138.136:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281aab1b-19e9-78dc-1799-00005494954f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/bin.sh","pattern":"[url:value = 'http://123.4.178.145:35087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b29c4ef-dc1f-c388-b11d-0000bbec581e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/i","pattern":"[url:value = 'http://221.15.141.166:50250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93563cbf-81f4-f6b0-4650-0000cb8f712e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/bin.sh","pattern":"[url:value = 'http://115.50.150.5:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--115368bc-bad1-1ed3-dae2-00006774a32a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.54.164:45403/i","pattern":"[url:value = 'http://175.146.54.164:45403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382032c2-928c-f9a7-c28d-0000b0437301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/bin.sh","pattern":"[url:value = 'http://42.180.33.198:56646/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df1222-06a5-e911-6e55-0000a12768d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/bin.sh","pattern":"[url:value = 'http://27.219.18.191:56945/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c92b9d-aaf0-8175-8234-00009575e942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.241.62:53088/i","pattern":"[url:value = 'http://115.55.241.62:53088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03d2359-6fbf-902a-ddf2-000071da6b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/i","pattern":"[url:value = 'http://27.219.18.191:56945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f401be0-15d5-968e-f490-0000827e1f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/bin.sh","pattern":"[url:value = 'http://1.62.79.200:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34cf5f0-ca23-618a-26b6-000057132ece","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/bin.sh","pattern":"[url:value = 'http://115.55.195.102:56873/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506ddb1a-7aec-8068-b3fa-0000b4086269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/nels/cli.exe","pattern":"[url:value = 'http://62.60.226.140/files/nels/cli.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--435be923-6693-4e4f-f597-0000bd787d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.5.187:37816/i","pattern":"[url:value = 'http://124.131.5.187:37816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec425c4-fcf0-cebd-b779-0000162aad02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/i","pattern":"[url:value = 'http://110.187.193.166:37676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c168cb0-9dc0-5bb7-c9f7-000052cad9e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/i","pattern":"[url:value = 'http://222.137.175.14:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b9e43b-73f8-0652-7ae3-000054e7727a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/bin.sh","pattern":"[url:value = 'http://222.137.175.14:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a49ed43-9888-e68f-3d51-0000627a02c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/i","pattern":"[url:value = 'http://115.51.88.28:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ebbec1-ffec-1a1e-2346-00002985019d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/i","pattern":"[url:value = 'http://219.155.125.9:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ec86b-ab95-a27f-8af1-0000a4608239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.246.175:50104/bin.sh","pattern":"[url:value = 'http://110.39.246.175:50104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d89b479-18b6-54f7-0749-0000bb9b4604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/bin.sh","pattern":"[url:value = 'http://115.51.88.28:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3453c-cb91-0877-ce09-00004bd36135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/i","pattern":"[url:value = 'http://42.180.33.198:56646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1d61fb-05fd-d828-c225-00005207efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/i","pattern":"[url:value = 'http://115.55.195.102:56873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d619f8fa-7afa-3554-fe3b-0000f42b700b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/i","pattern":"[url:value = 'http://182.114.255.23:39795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27166075-3386-61d1-e8c8-0000376531c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.118.60:44378/i","pattern":"[url:value = 'http://182.116.118.60:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1355b6b5-aaaf-6fa4-4003-00009e7dd503","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/bin.sh","pattern":"[url:value = 'http://182.114.255.23:39795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f056d70-ece3-c15f-ea6e-000000beccc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.59.112:44682/i","pattern":"[url:value = 'http://42.53.59.112:44682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d446d5e-060d-fcc5-41a5-000033b6d65a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/i","pattern":"[url:value = 'http://1.62.79.200:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6417e625-56fa-c1de-6a8c-00004107106c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/bin.sh","pattern":"[url:value = 'http://123.8.90.13:33466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d40cfc-6af4-907f-8c0a-000065a3964a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.188.38:34593/i","pattern":"[url:value = 'http://27.206.188.38:34593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecc21aa-8901-5554-423b-00003ed4061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/i","pattern":"[url:value = 'http://110.36.86.83:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82232ba-5ef6-baaf-f408-000004af2b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/bin.sh","pattern":"[url:value = 'http://182.126.248.115:38763/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f5c6c3-0feb-e81e-d9df-000037e81bf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/bin.sh","pattern":"[url:value = 'http://45.233.94.135:53401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a7679-0e97-5092-07f8-00005d8d70d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/i","pattern":"[url:value = 'http://45.233.94.135:53401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4916d463-36c2-ef8d-5417-0000af6785d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/i","pattern":"[url:value = 'http://182.126.248.115:38763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83dc6019-cd24-4ca1-6cff-00000d19288a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/bin.sh","pattern":"[url:value = 'http://42.59.232.35:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079e64e-f7be-f850-76e2-0000af8f78d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/bin.sh","pattern":"[url:value = 'http://110.37.53.25:34437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d25553-aa1e-8219-a8d6-0000359dcf4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/bin.sh","pattern":"[url:value = 'http://182.124.253.104:42413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79226ad9-d6f7-849a-3851-00003c5c89a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/i","pattern":"[url:value = 'http://42.59.232.35:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e6601c-00dc-3d5d-ec97-0000cdde3306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/i","pattern":"[url:value = 'http://123.129.2.24:55703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b322f-dd65-315a-10d3-0000a072d97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.162:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deeecbb-803b-f976-5c96-00008804274d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/i","pattern":"[url:value = 'http://110.37.53.25:34437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e475dc5e-f94b-aa91-9c1c-00009fb64950","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.242.210:39720/bin.sh","pattern":"[url:value = 'http://110.39.242.210:39720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d57d7-bc4e-5bf4-0959-0000812790d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/bin.sh","pattern":"[url:value = 'http://218.74.100.187:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f659ed-6499-ebf2-b3b8-00006aebb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.102.26:41199/i","pattern":"[url:value = 'http://105.184.102.26:41199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0a2afd-73ca-f978-9434-0000c6d480a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/bin.sh","pattern":"[url:value = 'http://182.121.185.249:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9861cda0-59b1-53b3-96cb-000069efe09b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/i","pattern":"[url:value = 'http://182.117.10.162:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec10031-6e9c-9bdb-1064-00003dbc3831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/i","pattern":"[url:value = 'http://39.73.44.67:44345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa0784c-7fbe-979d-ac10-0000bcc66196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/i","pattern":"[url:value = 'http://182.121.185.249:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0054c881-35d8-7be7-56e4-00007ba4fcb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/i","pattern":"[url:value = 'http://219.156.184.4:33396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ecde69-2036-1f8e-a767-00000577f3a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/i","pattern":"[url:value = 'http://218.74.100.187:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032bc95c-ae26-30d8-6780-00002754073e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/bin.sh","pattern":"[url:value = 'http://219.157.212.157:52831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ce0444-0e15-a654-235d-00009b554a00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://tblcxmo.duckdns.org/sysorbit.apk","pattern":"[url:value = 'http://tblcxmo.duckdns.org/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445cc04a-6fe7-a2a5-4a9c-0000205c876d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/i","pattern":"[url:value = 'http://219.157.212.157:52831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a34babb1-69c0-4b24-be76-00009c172c10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/bin.sh","pattern":"[url:value = 'http://196.190.224.62:36692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6714d9ab-2de0-ce33-21f4-00006b7b5d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f56d5c6-28a5-b7d3-d3e2-00001f136ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fc95cb-8f26-de84-2ce9-0000d1b1fc55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/lm","pattern":"[url:value = 'http://46.151.182.200/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e3613a-c7a1-4606-a8c6-0000986fcc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/script.sh","pattern":"[url:value = 'http://46.151.182.200/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af7e5f69-abfd-7c5f-af04-000039eea80e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f050ed7-8458-f569-7779-00009259bf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d707a3e7-bb0e-afbe-0db1-00004395f9d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c57aed5d-16e2-b809-dce7-0000cb12ed0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17ee36a0-1611-5e5e-86fc-0000e3a046d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad20fd52-138b-2b61-60d2-0000013200e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac92e36-a496-c9a7-363b-00003d2fafae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm","pattern":"[url:value = 'http://77.90.185.66/miraint.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c714221-e7e8-2078-f353-000028b40528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/xvr.sh","pattern":"[url:value = 'http://77.90.185.66/xvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a3a8f4-78f2-285a-36ee-00006fba5ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.ppc","pattern":"[url:value = 'http://77.90.185.66/miraint.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71670c89-36f9-cffc-faa2-000065f1de27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mips","pattern":"[url:value = 'http://77.90.185.66/miraint.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c2c05a-eb9e-70da-b5ec-00002bcd9a38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd8079a-ecd7-c5cd-04ca-0000c3bbb402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdf0525-e03d-51c8-24f1-0000a1ebfafa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/hybrid.sh","pattern":"[url:value = 'http://77.90.185.66/hybrid.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311a1d09-f2df-09aa-be76-0000f9a9eb76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/faith.sh","pattern":"[url:value = 'http://77.90.185.66/faith.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a8e234-cb5c-a638-fa1e-00006351b2df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62bcd4f7-37ba-60cc-2500-0000637edf25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a888f9-df8f-93b1-3802-00006534347d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25fbe6e2-cbed-8ec8-5cbe-00007c5b3ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655267f2-27cd-70f7-257c-0000edef2fcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f4334c-3787-3939-4f39-0000c34d62d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1606e5e-7a87-c69a-2fdf-000024986194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/boa.sh","pattern":"[url:value = 'http://77.90.185.66/boa.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0494e45-8b35-fbdc-d3b4-0000e3dd91ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.sh4","pattern":"[url:value = 'http://77.90.185.66/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--784289c8-76af-dcaa-3121-000019598190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12463bfc-13d4-0cb2-37e9-0000eba5c495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7a24fd-f3af-405d-bf5d-00000852dc95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da4d4fa-3212-48b4-e529-000078cad45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60b29897-9fd6-efff-6ffc-000090dd3909","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/zy.sh","pattern":"[url:value = 'http://77.90.185.66/zy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7056102b-3438-e3e1-ce8d-000008a40a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d106b9f-1488-0df3-b3b3-000099871866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c9d65-e96b-668e-ccd8-000051eac48d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec85d3c-13dc-1aec-e4ea-000043ad30bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5188e02c-4d46-4b8e-3d73-0000783c0285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd43154-c0ae-5e73-7c70-0000d820d282","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a72db0-edc9-eb82-dff0-000059b0d712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df84b062-0346-ba10-b310-0000b135b3be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75d124b-8994-8e2a-0f62-0000e5977ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.spc","pattern":"[url:value = 'http://77.90.185.66/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96a7e5b-82ed-e457-e75a-000088445828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a06f79d-e670-4393-f375-0000b323bcc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e516ad-9c6c-3829-726c-0000e92e286d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.spc","pattern":"[url:value = 'http://77.90.185.66/miraint.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff11993a-b2a2-cc77-8582-000017b934b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.x86","pattern":"[url:value = 'http://77.90.185.66/miraint.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060c5f6d-c4b8-768e-fe03-000080ec106b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b5ca40-0960-6db3-df46-00000ef2b06d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mpsl","pattern":"[url:value = 'http://77.90.185.66/miraint.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7455c716-f3f0-1f3c-3b91-000073677eea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.m68k","pattern":"[url:value = 'http://77.90.185.66/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51bac12-ab66-c828-1b22-00006303081c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.ppc","pattern":"[url:value = 'http://77.90.185.66/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd710331-c2b5-d9b6-a672-0000ddf0d89d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arc","pattern":"[url:value = 'http://77.90.185.66/miraint.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ae7c0a-edca-1d87-a047-00004b0578fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0ac153-dce3-5afd-6f90-0000a8b8da48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa51f68-ccc8-fdb5-b2f4-0000d9548600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/link","pattern":"[url:value = 'http://46.151.182.200/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa01d26-f532-3c9e-e6c4-0000e10cb077","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdcb857-b25b-a101-882e-00003efcc78b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee3d2fa-a411-00e4-9dae-0000c628a789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/lilin.sh","pattern":"[url:value = 'http://77.90.185.66/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e05243-d897-7cb6-0ec1-0000ae2daba0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/asus.sh","pattern":"[url:value = 'http://77.90.185.66/asus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fac3acd-eb41-648e-5667-000097c87178","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52382f51-cdaa-6cdf-063c-0000a3168188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dea8494-6048-587e-0a4a-0000115c03d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8761233-1a47-f739-f3d5-000013c9ba15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c6726e-b279-c342-f4eb-0000d931df3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b866c3-917b-5830-9563-000091829a20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9dcce46-2120-c4f4-6ab9-00005a7dd02a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5c076e-ac73-9c98-984c-00009ba328a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4c8952-4273-b98a-5c89-00000e6591b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125b1521-8b17-d1a0-89b1-000006f50703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/a.out","pattern":"[url:value = 'http://77.90.185.66/a.out']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7eed21-a82d-2bcd-1bf0-00009194b8bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4b385f-b97e-3061-a09b-0000650708fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.m68k","pattern":"[url:value = 'http://77.90.185.66/miraint.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a99ddc-80d9-8f26-5a76-00001b006669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.x86","pattern":"[url:value = 'http://77.90.185.66/mirai.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f14aa3-5368-5b32-3765-0000ef64c335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.sh4","pattern":"[url:value = 'http://77.90.185.66/miraint.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b117719-bdef-8d1a-b9f3-0000ed4f12d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm5","pattern":"[url:value = 'http://77.90.185.66/miraint.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeeaa35-b4b4-16fb-d00c-0000c58cf923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51f1635-1dfb-9354-b122-00004746da52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm7","pattern":"[url:value = 'http://77.90.185.66/miraint.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa6e865-a14d-a732-f0c7-000013783316","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e79d1c-6b9a-5a78-7306-00001bcb9c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/avtech.sh","pattern":"[url:value = 'http://77.90.185.66/avtech.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5058b55a-a892-ecd0-3640-0000695f6da3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62ac34b-e78b-6989-52da-0000b3d56a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37dc253f-b996-afda-31d2-0000bcd7a92c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7305699e-b5bd-3728-95e1-0000c7aef446","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea5ac1c-543f-0dbf-7fe5-00004544bb26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/bin.sh","pattern":"[url:value = 'http://118.232.137.101:40783/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31826d41-e452-e275-727e-000056cb558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/i","pattern":"[url:value = 'http://118.232.137.101:40783/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c92c4c-1da2-8107-bd53-0000567f2020","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cd7d7c-7e29-5ea4-1c58-0000d6d96d8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c4faf2-513d-e9a5-8aa1-0000306cedbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d4a054-3423-1904-eba3-0000b07a6901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ae145e7-82dd-d750-eb4c-000002d8ea4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda2dbc4-c6a5-6a89-c518-000038c4a5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5206669d-c8d8-1f0a-7d0d-0000db79074b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38306665-3190-e06c-0bda-0000af14b0d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33acbae8-13f2-43ce-7388-000092cd6d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6890116a-28e9-ea29-b5ef-000012e0bb64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4515ca70-e32c-20ff-7365-0000fc4ff694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e734ac33-02ac-cef3-efca-0000f15d19d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cc50f5-381c-52f8-5239-00006f102772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7408041-e998-0483-df2e-0000c8717b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a570cfc6-848d-4423-7033-00007d331544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e4da5a-c9d5-df9b-b2ad-000049ede5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c8e2c1-3454-8ec3-67d9-00009dec6277","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a266485-96c3-6a94-7bc9-0000c014b711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f43460-9682-5144-9d50-0000bd5b4be9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e0686e-f4e9-13c8-ead3-0000bb11a0b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacc2360-b6f9-b898-fe95-000090da77be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d71e24f-5370-4da4-0169-0000c4fa5fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e66afa-d5f8-192e-402b-00009a5e779a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df519e9-2c35-1b21-e3e4-000004920117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eca5e2c-3759-63c5-78c3-00009aa8a140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73389afd-ef78-c8e0-88a6-0000eac67f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff08654-f7de-cd11-e639-00004fa70eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf89482-e254-ab4f-5d78-0000b08cbfdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4775507b-6458-ef0f-e978-000036061abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a6d637-4f5e-8236-375d-00003d85d21f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--869e7046-5646-51d2-155f-0000b8e973ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71055cd-3104-574c-0461-0000b77af96f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8472e432-598f-68b9-c8ab-00005780522c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12724aef-bc57-6bc8-5e89-0000e25565be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44ab8a7e-6510-94a9-d35b-00002a710a11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f92c9b-c1bb-17b4-60ab-0000f8603328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19940d0-bd11-3361-b611-00000055148a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ea5c34-ee32-f582-352b-000081c5111a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d8969a-009e-ada9-ea54-0000abe10f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f6305c-0f08-3a6f-3347-00001a48f327","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac9cf48-b5f1-6096-f305-000024252889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f1abdd-2b50-e7f6-8efe-0000f66e4412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f117844-1af7-0530-f47a-00000eb3b391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60a5053-4585-76b1-f75e-0000c0e261cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f14ae2b-2e06-9bd2-676a-0000ea30a98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf747df2-24d9-e35b-dbc1-00008fcf5041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a3498a-6bf6-9818-93e7-000076b0dde4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd14e7f9-de96-f96e-db96-00004586bc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5f7d3-03d0-1798-881d-0000f024af4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31402e9c-af7d-688e-9c64-00007da44cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a7fbbe-e27c-8927-0077-0000844c98e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa26403-c604-4620-37bf-0000cf79971a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d088babb-78ed-0b3b-5c7e-0000c03419af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/script.sh","pattern":"[url:value = 'http://46.151.182.200:8080/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c245b4ef-07ee-d746-4bc9-0000d0d70c52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc4b634-26aa-18de-1205-0000f9820748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d4580e-ea4f-66ee-b4b6-00000d34a915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa44f95b-9d46-5b50-0c8f-000020505b28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad0ea3a-a691-5190-ed9d-0000ffc8ec10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48cf95-704e-38c7-dbc4-00003bcb3da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5428479-2aae-ae69-d411-0000686b6b37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570d0036-b053-f356-a5b9-0000aa21a066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf86095-7c3c-0a18-8332-0000d9352ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a119a85-d03a-6fea-8392-0000f296defd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9915aa-9676-ac2f-a528-00009eff5096","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aeb0e8-6f1e-fda8-6fad-0000862ce4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/link","pattern":"[url:value = 'http://46.151.182.200:8080/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--109da79e-21f7-cec1-7584-00006c031593","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e35e54-c03d-d4cc-7ae7-000082f800ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8231989d-e28c-4688-b2a9-0000e9fb6ea7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652465ad-4e0c-6748-35fb-0000015ff0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9a095c-6324-d24c-282e-000050c853e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d404d92-1949-1806-0a60-000039ea59e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f98fa1-08ab-0466-a815-000054b6bcbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fcd2a1-c027-70c0-5141-00002bc96bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d37e5bf-c845-0bf8-0d62-0000a1c05eb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62356949-acdf-ec92-2964-000069b1e74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c00400-8038-aa40-b65e-00000b7e424d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f963f92-4ad7-f3f4-c888-00004b533562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78263b33-6a12-38be-d757-00003ce474da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/lm","pattern":"[url:value = 'http://46.151.182.200:8080/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48965463-b35c-e6f4-d744-0000795c9ebe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb589533-5afe-5ad2-7051-0000bbddb915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043eb405-9e83-221d-f805-0000b375f156","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39b44e8-b8c6-fc62-b5a3-0000a04f0498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fd3d95-71de-9ebb-dde1-0000a64af9b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c520603a-f694-7acc-2ff5-000083196e42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ba0b44-3524-14e3-d227-00004ba5e3b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbee252e-599a-a49c-ff87-000069e43117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554bbe6f-cb3c-eedc-2f65-00002cb5d2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcf6a82-8acf-e137-e1c8-0000820ed637","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4bd5c3-8a64-0088-f489-00007adec4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a9209b-33a1-ad6a-b36c-00003fbe2d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1dee0c-b3b6-c93c-27c1-00005e970e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4f0c5b-dfc1-1ee6-9579-0000de4997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8dc415d-e41a-d7cb-18a5-0000f615181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32df4f5-84a0-9ed8-d9e5-000072768c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea30d529-0276-cdc6-6203-0000197c39dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2292e657-ea28-a08c-42d0-00008ba0dbbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7258a99-4b97-405e-8832-00008cdc62a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6744ffa6-0009-cf2a-42b9-0000cb161ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f20d799-1dbb-b7b4-db38-0000f3a3b5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09b202-14f8-9f8c-a7a8-000058dde563","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2138ad-d10a-8f69-f134-00007e2027a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163dae53-51e7-a21b-b5a1-0000f2600827","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ef689a-fa2b-0947-42b5-00009963666d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7264fb43-005c-0cc5-0789-00003b3deb72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20195c38-d402-8d46-30b9-0000ac6b4b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d5516c-fa29-89c7-adec-0000e0a23dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pppc","pattern":"[url:value = 'http://31.77.227.121/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32555d0-64b9-cccc-2918-0000f5370d0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pm68k","pattern":"[url:value = 'http://31.77.227.121/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d87b33b-867d-a25c-225a-0000607ca43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/psh4","pattern":"[url:value = 'http://31.77.227.121/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bfd7ae-a984-ddd4-84a3-0000b237c8a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm","pattern":"[url:value = 'http://31.77.227.121/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f096106-c867-b846-552d-0000f5c1dbd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmips","pattern":"[url:value = 'http://31.77.227.121/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57f1a96-5cc6-1ea1-397e-00007d7f172f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm5","pattern":"[url:value = 'http://31.77.227.121/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--456760a2-ef70-16b7-ab28-000098a153b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/px86","pattern":"[url:value = 'http://31.77.227.121/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c764b2c-6929-b972-17bd-00006fcab8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm6","pattern":"[url:value = 'http://31.77.227.121/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a93ef35-de74-cef3-b596-000066364f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pspc","pattern":"[url:value = 'http://31.77.227.121/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b717bba-7a78-2e90-f3c9-0000d776dfa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm7","pattern":"[url:value = 'http://31.77.227.121/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adba7cf-fe26-e211-26fd-00009ec2b59b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.121/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee4b651-8dc4-b8d3-e139-00008cf02ef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/i","pattern":"[url:value = 'http://36.69.84.54:40914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01700e3-9d84-1405-0a93-0000dc01ae30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/bin.sh","pattern":"[url:value = 'http://36.69.84.54:40914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae7ecfa-9604-71cc-1d9f-000080807829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip","pattern":"[url:value = 'https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0430e0ca-2550-7ac5-9eaf-000010e9957c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/i","pattern":"[url:value = 'http://196.190.224.62:36692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b0fceb-8f3d-a485-0758-000022a96713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e12396b-c3fe-fab9-6878-00004dc99d13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8bd0d3-39e2-91b0-405a-000080eb515b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/x86_64","pattern":"[url:value = 'http://31.77.227.121/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6a8921-1d0b-0946-330b-00008adfc286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b5d23e-1a4e-1930-9920-0000d2866d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/ok","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c754263-18c1-037e-29d5-00005cc7988f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/bin.sh","pattern":"[url:value = 'http://42.176.120.191:54769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a829a0-d91e-090d-075f-0000b145ac77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/i","pattern":"[url:value = 'http://123.8.54.39:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77e7cee2-65e1-13b6-d4d6-00003507cc0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/zombie_scanner.sh","pattern":"[url:value = 'http://149.50.154.101:8000/zombie_scanner.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0aa6e3f-2430-32a9-dde4-0000163ceb7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc79cdd1-73ff-9b38-89a9-00002fb07aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm7","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0801d76d-0a81-a823-ccb0-00000d077e9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mips","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b3faf2-01a5-a5f1-7fd8-0000fe0d09c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mipsel","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21530e90-5017-e5fb-8b9e-00006584d0bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1b2509","pattern":"[url:value = 'http://5.182.210.174/1b2509']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--213eb203-e64c-7608-07de-0000e1a22a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81d27b","pattern":"[url:value = 'http://5.182.210.174/81d27b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c350f6ca-f2a8-d752-e9eb-000041c34134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/785c9e","pattern":"[url:value = 'http://5.182.210.174/785c9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d009ab9c-7208-b1a0-f9c7-00003450d96c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/905d94","pattern":"[url:value = 'http://5.182.210.174/905d94']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d8bb7b-e99d-b684-c21b-000023ebefa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0f62ad","pattern":"[url:value = 'http://5.182.210.174/0f62ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bcebb5a-9227-5125-1d51-0000eeb07657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/becf65","pattern":"[url:value = 'http://5.182.210.174/becf65']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393d9097-5527-5af9-8163-000025032de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/08bac6","pattern":"[url:value = 'http://5.182.210.174/08bac6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--881fae9e-0e44-62a4-8cb5-0000be774c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0a2c7","pattern":"[url:value = 'http://5.182.210.174/c0a2c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39108bd7-8d3c-f8a7-d917-0000b97037c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/813df0","pattern":"[url:value = 'http://5.182.210.174/813df0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2917f8-8b69-ee26-e0be-000008907b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/53ffdd","pattern":"[url:value = 'http://5.182.210.174/53ffdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddf6701-0cad-e639-3541-0000c9641d21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0589f","pattern":"[url:value = 'http://5.182.210.174/c0589f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169437be-6c68-2086-6e71-00005cd361cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d650b","pattern":"[url:value = 'http://5.182.210.174/0d650b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c017b42-8213-c42a-cd30-00003ca48cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/567d74","pattern":"[url:value = 'http://5.182.210.174/567d74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--387e8b1b-b90b-9e7d-f0a2-00008bcf14bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/531853","pattern":"[url:value = 'http://5.182.210.174/531853']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2974784b-6ead-cdde-8c86-00003837617d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/587199","pattern":"[url:value = 'http://5.182.210.174/587199']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d79aed6-ecb6-345f-c799-0000642f54ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c2baf","pattern":"[url:value = 'http://5.182.210.174/4c2baf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3167fb-2505-9d08-f79d-0000368524cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1067f5","pattern":"[url:value = 'http://5.182.210.174/1067f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aa2f8e-3368-3693-20dd-00003bc20188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d1847","pattern":"[url:value = 'http://5.182.210.174/1d1847']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a778702a-a63b-9512-7f64-0000b04d06c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2301d","pattern":"[url:value = 'http://5.182.210.174/a2301d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3240eabc-b451-9b7f-19a9-0000ea7f181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1882a","pattern":"[url:value = 'http://5.182.210.174/d1882a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446718-c42e-5812-cc71-0000bd4ecfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae64e3","pattern":"[url:value = 'http://5.182.210.174/ae64e3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03084e34-96ff-7ae6-aa9e-0000b735e258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5f61f","pattern":"[url:value = 'http://5.182.210.174/a5f61f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9e67be-c81d-1ff2-a71c-000006bdd58c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bba45d","pattern":"[url:value = 'http://5.182.210.174/bba45d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd3e098-39d7-74cb-b2db-000046d2dcfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110dc2","pattern":"[url:value = 'http://5.182.210.174/110dc2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073636f5-488e-abea-1f80-000001dff07e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.232.72.245:48281/i","pattern":"[url:value = 'http://45.232.72.245:48281/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3309eb45-219c-e6de-64c4-000046719835","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/bin.sh","pattern":"[url:value = 'http://120.28.193.113:47622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0042c6a4-0a44-ad45-2f79-00002f75e066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/i","pattern":"[url:value = 'http://120.28.193.113:47622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24feea20-5843-12fd-17dd-000032afc717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/bin.sh","pattern":"[url:value = 'http://115.56.57.92:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6656e4-8a7c-3b3a-0623-000012ad0312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D","pattern":"[url:value = 'http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b125705-bcbe-48b7-a54a-0000f4fe3df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/bin.sh","pattern":"[url:value = 'http://42.58.118.214:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e56d380-ae9a-88bd-71a1-00003d5e3c6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/bin.sh","pattern":"[url:value = 'http://115.55.130.196:43005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3f10f9e-80b5-0fad-4315-00004ed90ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/ok","pattern":"[url:value = 'http://31.56.209.189:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e482aef-3ab8-4856-828d-000041a4d797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/ok","pattern":"[url:value = 'http://31.77.227.130:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b62ec2-05e8-50b9-574d-00004f58188c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/i","pattern":"[url:value = 'http://115.56.57.92:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49d6c35-bfc1-ebfc-b44b-00009120a963","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.149.147:58354/i","pattern":"[url:value = 'http://42.224.149.147:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d548f8fe-288f-09b9-bc8e-0000ef4eb9b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/i","pattern":"[url:value = 'http://219.155.168.189:41959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6ce778-7b41-7199-2d63-0000fbaf3430","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/i","pattern":"[url:value = 'http://115.55.130.196:43005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2544ee-0e7a-44a0-9d67-0000881be65f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/bin.sh","pattern":"[url:value = 'http://210.208.110.51:46526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c072d-bad4-37c8-81fd-0000f4c80b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/bin.sh","pattern":"[url:value = 'http://219.155.125.9:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a2f35d-80b9-4dc5-1053-0000975b88cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/bin.sh","pattern":"[url:value = 'http://123.9.66.12:35690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9b63e3-c0be-5a35-d5c8-000076df5910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.253.249.237:5001/dip.exe","pattern":"[url:value = 'http://80.253.249.237:5001/dip.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453de80e-2628-ca46-cafd-000030275d14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/bin.sh","pattern":"[url:value = 'http://42.53.3.62:57366/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0860731-452d-865d-8a69-00009a457a7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/bin.sh","pattern":"[url:value = 'http://219.155.168.189:41959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545497f-3114-fd56-2468-00008cd62bd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df64a3","pattern":"[url:value = 'http://5.182.210.174/df64a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dea911b-8c70-6f0e-e4d8-0000cc80b95f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d9fc8c","pattern":"[url:value = 'http://5.182.210.174/d9fc8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197c36f-a9f5-12c9-95f2-000039414b78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8c2153","pattern":"[url:value = 'http://5.182.210.174/8c2153']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648b0486-3ed4-524c-c727-00000fc8bd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ce4957","pattern":"[url:value = 'http://5.182.210.174/ce4957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b748d-2759-ed09-55be-0000aa71f9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2a6c","pattern":"[url:value = 'http://5.182.210.174/7b2a6c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--274d5aab-908b-9784-3238-000069627ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878e23","pattern":"[url:value = 'http://5.182.210.174/878e23']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae78cf1d-9d1c-78c1-6cb6-0000f23447ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cabc7a","pattern":"[url:value = 'http://5.182.210.174/cabc7a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbb5a74-34d2-d041-4f12-0000bb695a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a12c22","pattern":"[url:value = 'http://5.182.210.174/a12c22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdb5006-dc97-6719-1851-00005b416f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2059d3","pattern":"[url:value = 'http://5.182.210.174/2059d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306d25ce-b1ec-07d9-8e70-0000b4b733d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/73c8e4","pattern":"[url:value = 'http://5.182.210.174/73c8e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41de2f7e-9ba8-e4d7-1e7f-0000d96ec70b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1ad6dd","pattern":"[url:value = 'http://5.182.210.174/1ad6dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d66a88c-c265-35c2-f0e7-0000de56558b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a7a53e","pattern":"[url:value = 'http://5.182.210.174/a7a53e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87cb14cc-d580-6a35-48a5-00004edbe660","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/ePSDxHP52.bin","pattern":"[url:value = 'http://185.29.10.11/ePSDxHP52.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6427e730-5571-1c7a-479a-00006428701a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Menneskevrdige.csv","pattern":"[url:value = 'http://185.29.10.11/Menneskevrdige.csv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c784188a-1283-55ca-4526-0000701a045f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.48:48702/bin.sh","pattern":"[url:value = 'http://123.129.131.48:48702/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc4177b-83de-cb9a-aca7-0000355840fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/oojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/oojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde629c3-70ad-7fff-300a-00006ab0b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2212531a-b21f-ea80-6bd4-000087e81cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/newcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/newcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6570e2-5160-d4a4-bd45-00004cf7addf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/KDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/KDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29da7776-bf1c-fd56-8715-0000a272859e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojdcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojdcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddde9dda-72d4-990a-39de-0000d1ecfe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/U1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/U1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91cfa744-67ef-06df-1935-00006978952c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310bb013-ef8a-85a5-ed76-000099012f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e69140-590e-e29e-068f-0000a5df34fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/Ecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/Ecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1efbd70-bf67-3582-3c03-0000c1590223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/cryptede.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/cryptede.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3019f306-1e04-a5d2-1b55-0000ab012392","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc55aa0-5f4a-c1b2-5abe-000086549b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5048f0cc-4b5f-3cfb-7b8e-0000007802c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2bea45-096b-73ef-64e9-00008a0ae83e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aaacrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aaacrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e340a5-cb8d-16a8-0208-0000e2bf2676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://archivoscrosoft.com/newrem.png","pattern":"[url:value = 'http://archivoscrosoft.com/newrem.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355d03a0-d13a-5fb6-a7b9-000013f96671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/cat.sh","pattern":"[url:value = 'http://31.77.227.121/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0338dc-3e37-bfcd-ce37-0000fe736421","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/k","pattern":"[url:value = 'http://31.56.209.189:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20df9246-97c7-26aa-4923-0000d57a9321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/i","pattern":"[url:value = 'http://42.53.3.62:57366/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f420da29-d7b3-91a5-3570-000083533568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/k","pattern":"[url:value = 'http://31.77.227.130:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2685b0-d724-e7bd-3527-0000a5d15223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/AFrlKy223.bin","pattern":"[url:value = 'http://185.29.10.11/AFrlKy223.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f82cdd4-a23e-6296-1228-000003149302","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Supersensitizing.hhk","pattern":"[url:value = 'http://185.29.10.11/Supersensitizing.hhk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c813dfa-6dc8-b38e-a985-0000bc7248ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/i","pattern":"[url:value = 'http://115.53.209.13:43098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8880f18-abe9-eb4b-001d-000082b8a063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/i","pattern":"[url:value = 'http://123.9.66.12:35690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf1b047-e334-390a-2bb1-0000afdcb224","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5371da7e-d254-c70d-0e8b-0000f6cc6c98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326a4276-8593-afad-c0c8-0000cb22f4bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/vekselvises.asd","pattern":"[url:value = 'http://185.29.10.11/vekselvises.asd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e689d35-d9b6-e2c6-ef9c-000051507f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/kLcvzhpr18.bin","pattern":"[url:value = 'http://185.29.10.11/kLcvzhpr18.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bece04a3-4b5e-b2d9-7050-000037f88c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b","pattern":"[url:value = 'https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6310ac7f-9dcb-4854-5731-0000b4de8921","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.148.152.143:8472/linux","pattern":"[url:value = 'http://8.148.152.143:8472/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151f0a74-bdd4-b084-a50d-0000d0696048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://without.kesug.com/img_051425.png","pattern":"[url:value = 'https://without.kesug.com/img_051425.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83590611-460f-128d-fba8-0000ad7fc2bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.149.187:51152/i","pattern":"[url:value = 'http://115.56.149.187:51152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1a7734-7d57-f890-0c3f-00004a081e04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417e0c2c-9367-fe50-e877-0000de29e95c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://essizs.com/img_170232.png","pattern":"[url:value = 'https://essizs.com/img_170232.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c27458-4710-7804-b0ca-0000a8e02529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/75/wemadegoodthingsforbestforever.hta","pattern":"[url:value = 'http://204.44.69.222/75/wemadegoodthingsforbestforever.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb2da34-56b3-2216-9792-000089acf7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_PRO.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0714a329-cc08-fb62-336a-00005c1a0391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/saraka/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/saraka/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71197e0-0f91-dc08-00b7-00000924a9c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a009a8-ef01-82d8-c91d-0000240951ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f8eb5e-4cd1-276f-04fb-00009cb81668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png","pattern":"[url:value = 'https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5141ecc-62d2-299c-cd64-0000a258c1cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.180.221.132/GMT/PAPAcrypted.ps1","pattern":"[url:value = 'http://38.180.221.132/GMT/PAPAcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698633aa-82ec-9832-f75c-0000d029de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:53976/i","pattern":"[url:value = 'http://109.236.44.113:53976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010494a3-910b-4b35-49d2-00003d082d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.109:54758/i","pattern":"[url:value = 'http://182.126.95.109:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b189c73-9e23-fc97-c602-00006c59cecc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.121.5.157/abc.sh","pattern":"[url:value = 'http://85.121.5.157/abc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f183c01-58af-8329-d18f-0000952bce1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/i","pattern":"[url:value = 'http://83.68.248.254:34464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11229e6b-4d09-ee3d-2554-00008a56870e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/bin.sh","pattern":"[url:value = 'http://83.68.248.254:34464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff66c82-3b70-ea3c-7c64-00008b51f96d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/bin.sh","pattern":"[url:value = 'http://110.36.1.200:43003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067f68fb-5d47-5181-26b8-00002079549b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/codu","pattern":"[url:value = 'http://193.23.118.161/codu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f749494-974a-eee1-b9dc-00004c29af26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.130.68:34461/i","pattern":"[url:value = 'http://105.186.130.68:34461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04584c89-17ef-fa70-3112-000023eebc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/bin.sh","pattern":"[url:value = 'http://101.109.243.237:40041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6c75d9-dcfc-582a-ae61-00006062ebff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/i","pattern":"[url:value = 'http://101.109.243.237:40041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d499666-3c8b-d9a8-2b5d-0000903726e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.246.20.26:46242/bin.sh","pattern":"[url:value = 'http://112.246.20.26:46242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c9a918b-4b8d-be78-5d5e-000061967092","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/bin.sh","pattern":"[url:value = 'http://59.103.116.68:42561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcbf35-50ba-cf50-c320-000001806e4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/bin.sh","pattern":"[url:value = 'http://119.114.153.10:37040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2d54fa-e64e-54f2-c2be-0000d72d7776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/i","pattern":"[url:value = 'http://112.198.239.2:51852/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d7bf10-44bf-37fe-8cad-000093ba13f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/bin.sh","pattern":"[url:value = 'http://125.41.228.207:54336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50424957-f881-7bf8-67eb-000024eca93b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/i","pattern":"[url:value = 'http://124.6.185.132:48257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077a9fa3-5b96-73e7-be26-00006941a867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/bin.sh","pattern":"[url:value = 'http://60.18.9.255:60894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a007ab-a094-c923-c7da-0000b8ccc217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/bin.sh","pattern":"[url:value = 'http://112.198.239.2:51852/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62de2136-c846-975d-c188-0000396436de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/i","pattern":"[url:value = 'http://115.48.148.140:53929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70a5ae05-cc89-7cad-75f2-000064854135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/bin.sh","pattern":"[url:value = 'http://115.48.148.140:53929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40bdd6d-9599-bfcf-68fa-0000173d7fb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/i","pattern":"[url:value = 'http://110.36.1.200:43003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e34e8fb-1ae8-5e0a-acab-0000faf454b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.54.119:55125/i","pattern":"[url:value = 'http://125.44.54.119:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8288530a-0249-0bae-f64f-00008b14c57f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.130:40967/i","pattern":"[url:value = 'http://210.208.110.130:40967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d3c90f-61e3-ed22-9ccc-0000fac8ed5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/bin.sh","pattern":"[url:value = 'http://180.191.122.115:56431/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca0a841-57a4-02d4-ffcb-0000352637fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/i","pattern":"[url:value = 'http://111.164.68.144:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa51144b-71cf-9c06-8a59-0000ba7b9112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.231:50864/i","pattern":"[url:value = 'http://27.37.100.231:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fd1cbf-77c4-e7e8-ec77-00001f0f2f09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.192.200:49600/i","pattern":"[url:value = 'http://123.12.192.200:49600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4bac3d-9d5e-903b-8ae7-00003b79586a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.174.167:52736/i","pattern":"[url:value = 'http://42.227.174.167:52736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7cfb84-ec49-5295-3b67-0000bcb1f3ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.13.28:44703/i","pattern":"[url:value = 'http://115.63.13.28:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4b5596-4cce-a753-bf01-00002b2ab068","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.6.209.122:60543/i","pattern":"[url:value = 'http://42.6.209.122:60543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f72e2c-c022-aa5c-3c5a-0000edff940f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/bin.sh","pattern":"[url:value = 'http://42.7.146.107:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc02b54-e106-bec1-5e87-000072d7fca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.16.92:47673/i","pattern":"[url:value = 'http://175.107.16.92:47673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5d1e30-cc6f-b38a-e2a6-00001186b243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/i","pattern":"[url:value = 'http://115.63.14.209:33264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04967bad-34b7-4dad-ee5f-0000f0711dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/i","pattern":"[url:value = 'http://180.191.16.24:34228/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174522f5-1df5-16bf-e784-0000e67d07bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/bin.sh","pattern":"[url:value = 'http://27.215.126.58:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d5d4a1-9147-786a-589a-00003f215419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/bin.sh","pattern":"[url:value = 'http://219.155.225.195:37800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b295e6-a11c-1616-70a3-0000704045cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/i","pattern":"[url:value = 'http://210.208.111.26:56098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85d2da56-e7fa-3f36-cbb0-00008f4d8944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/i","pattern":"[url:value = 'http://219.155.225.195:37800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd18ecd-3ae6-5248-7d0c-000039d51715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.248.117:34689/i","pattern":"[url:value = 'http://110.39.248.117:34689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11e3a8d-b694-81b8-afc6-0000c23d2ec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/i","pattern":"[url:value = 'http://182.124.253.104:42413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827b9954-7a85-87f0-fee0-0000f8975aa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.34.109.121:35275/i","pattern":"[url:value = 'http://118.34.109.121:35275/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043dd0f6-3f90-c323-8b44-00009c6fc3c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/bin.sh","pattern":"[url:value = 'http://115.50.50.133:53842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f282c0c6-cb9b-7faa-02c9-0000a9189aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/bin.sh","pattern":"[url:value = 'http://115.49.31.72:58726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e8d3fb-b7e6-bd00-5a1c-0000492325ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/i","pattern":"[url:value = 'http://140.237.37.41:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee91af9-fcd8-efa7-d185-00002798ad18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/i","pattern":"[url:value = 'http://182.112.245.250:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b6e27af-ed0a-37ed-6507-0000569da1f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/i","pattern":"[url:value = 'http://115.49.67.185:47193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e229be20-d9e3-95da-88ec-0000f4cf18f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.173.181:58197/i","pattern":"[url:value = 'http://42.231.173.181:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89579714-c4c7-8aa3-6b46-000024569601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/i","pattern":"[url:value = 'http://180.191.122.115:56431/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beaa945a-06c4-b440-9d53-0000b673eb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/i","pattern":"[url:value = 'http://42.231.67.26:56479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6fa0a8-b626-7e98-ed05-00005017897a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/bin.sh","pattern":"[url:value = 'http://116.138.244.27:55282/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b4e76c-de30-bbb7-2f1c-000068886574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.17.247:35288/i","pattern":"[url:value = 'http://219.155.17.247:35288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5da96f-d55d-306a-c9e4-0000dde2e371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/bin.sh","pattern":"[url:value = 'http://140.237.37.41:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e18d73-ad9a-0bb6-2f37-0000fbe1a79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/bin.sh","pattern":"[url:value = 'http://27.206.197.243:34685/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da58e7a-fe21-3cef-0bef-0000aeac4a07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.111.17:45464/i","pattern":"[url:value = 'http://175.148.111.17:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9f3589-748b-9610-a636-0000d813299c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/bin.sh","pattern":"[url:value = 'http://115.63.14.209:33264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eafc9a47-e7bb-eaa3-0188-0000be0602a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/i","pattern":"[url:value = 'http://42.7.146.107:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a010d4f1-1f94-850e-4c8d-0000b8934c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/bin.sh","pattern":"[url:value = 'http://111.164.68.144:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae6c07-eabf-66b5-fd32-0000091ff91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:41764/bin.sh","pattern":"[url:value = 'http://78.178.118.193:41764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00469f21-3044-7496-2105-0000a49f1b09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/bin.sh","pattern":"[url:value = 'http://193.31.201.20:33068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2560add0-0241-9957-109f-00002fe4d347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/i","pattern":"[url:value = 'http://193.31.201.20:33068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c3af1-85b3-988d-943a-000071d8de4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/bin.sh","pattern":"[url:value = 'http://124.6.185.132:48257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2805daf5-333b-5aff-2ca6-00004cc42da7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/i","pattern":"[url:value = 'http://115.50.50.133:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ffacb5-9547-7d3e-5ef1-00001853651a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/bin.sh","pattern":"[url:value = 'http://115.49.67.185:47193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27e0a22-bed3-cc99-2e45-000082ed6373","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.183.175:50468/bin.sh","pattern":"[url:value = 'http://123.14.183.175:50468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612ee0e3-6e0c-fc1f-6e5e-0000dd7ad515","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/bin.sh","pattern":"[url:value = 'http://110.37.106.220:47631/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b180caae-dd99-0752-1744-0000fb3d8991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/i","pattern":"[url:value = 'http://59.103.116.68:42561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceaf5c6-e282-2f00-2ed5-00004840b1ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:50485/i","pattern":"[url:value = 'http://115.55.179.35:50485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c1573-8dac-0699-3e4c-0000817529d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/i","pattern":"[url:value = 'http://116.138.244.27:55282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10067444-fed2-e951-e743-000021d57965","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/bin.sh","pattern":"[url:value = 'http://110.37.44.119:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d62b392-a9e0-4020-9d41-000066b5d4b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/i","pattern":"[url:value = 'http://58.252.113.28:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e06604c-0676-0a0d-1d4b-00000168ffc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/i","pattern":"[url:value = 'http://110.37.44.119:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5713edf1-5d33-63b0-2bfa-00002f1e9061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://88.254.51.229:57095/i","pattern":"[url:value = 'http://88.254.51.229:57095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02391cc-8dfb-81a7-6e1e-0000a6fee043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.238.173:38540/i","pattern":"[url:value = 'http://42.232.238.173:38540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca3c361-dfb2-d5b6-b336-0000126b925a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.157.30:34623/i","pattern":"[url:value = 'http://175.148.157.30:34623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782f9ef6-3b9a-98c7-0b62-0000012cd079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/bin.sh","pattern":"[url:value = 'http://61.137.193.167:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1c21b3-fe9f-ebdc-0779-0000abf04cc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/bin.sh","pattern":"[url:value = 'http://210.208.111.26:56098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc40850-b925-58ce-7b1a-0000cc1ae7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/i","pattern":"[url:value = 'http://115.49.31.72:58726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13450eea-f769-da7b-9b32-0000c836885a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/bin.sh","pattern":"[url:value = 'http://115.63.242.52:38396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cefc9e9-2c58-437d-6df8-000078c83d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/i","pattern":"[url:value = 'http://27.206.197.243:34685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79cd375-8808-f9df-6b8b-0000f5e0a671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/i","pattern":"[url:value = 'http://42.237.123.108:59063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60c6a35-63e0-bd9c-8763-00004072ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/i","pattern":"[url:value = 'http://115.48.8.75:42853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331190f2-0dea-6b69-a122-000059c748cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/i","pattern":"[url:value = 'http://125.112.61.39:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93551e3-2519-d949-569b-0000aac183c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/bin.sh","pattern":"[url:value = 'http://42.237.123.108:59063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ad88afd-1eac-2d76-e0c1-0000000e8f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/bin.sh","pattern":"[url:value = 'http://182.112.245.250:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe8548-903b-fc0b-c8f4-0000960e2a91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/i","pattern":"[url:value = 'http://115.63.242.52:38396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632e49c1-1f83-0cf6-2553-000099764039","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/i","pattern":"[url:value = 'http://119.114.153.10:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349b1c24-a8b9-6778-7cfb-00004a98bc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/bin.sh","pattern":"[url:value = 'http://71.207.128.92:54954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ad7489-c1e4-0bc9-02c4-0000f9a606f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/bin.sh","pattern":"[url:value = 'http://125.112.61.39:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0483798-feab-9f33-91ae-0000ef76c5c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/i","pattern":"[url:value = 'http://125.46.213.70:47197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27dbadc5-86e4-5f07-8a1c-000069bad8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.194.151:60883/i","pattern":"[url:value = 'http://124.94.194.151:60883/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--686d1696-2dd8-0926-b52c-0000227329b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.221.231.180:37749/i","pattern":"[url:value = 'http://27.221.231.180:37749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f85f118-66c4-d390-af3e-00007636101a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/i","pattern":"[url:value = 'http://123.13.30.198:35585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbdac37-6234-be71-1b07-000062308a50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/bin.sh","pattern":"[url:value = 'http://123.148.140.58:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f1960a-5d55-cbb2-a4ed-000014402fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.167.208:59256/i","pattern":"[url:value = 'http://42.239.167.208:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d7f6f7-773f-69fd-485d-00001eac21a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/i","pattern":"[url:value = 'http://123.148.140.58:43457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1049eaac-accb-7be4-3e64-00008f8503e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/bin.sh","pattern":"[url:value = 'http://115.48.8.75:42853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f9c054-7e70-43ef-88a3-000090585e70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.9.132.41:50484/i","pattern":"[url:value = 'http://175.9.132.41:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cda74a2-8dd1-2ed3-7c73-000003df4bb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/i","pattern":"[url:value = 'http://182.121.179.219:53168/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e9562b-bdc7-61d4-fc20-0000f5594c56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/bin.sh","pattern":"[url:value = 'http://58.252.113.28:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76ea7f3-7a7f-05b1-62e0-000008b8eee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.229.46.13:57947/i","pattern":"[url:value = 'http://113.229.46.13:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f671a93c-00eb-1013-ab8f-000081c01fa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://trueinggrik.com/QuickFetch.exe","pattern":"[url:value = 'https://trueinggrik.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d10bd1-21f5-6320-7ef5-00006a1d21d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.170:52720/bin.sh","pattern":"[url:value = 'http://182.117.68.170:52720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de28c8e3-3ed2-530e-0bd4-00006944de35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/i","pattern":"[url:value = 'http://112.240.173.194:59049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fed479b-1198-df82-59fe-000064b35587","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/bin.sh","pattern":"[url:value = 'http://180.191.16.24:34228/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63febe48-2ce8-ba55-1168-0000aabcc598","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/bin.sh","pattern":"[url:value = 'http://112.240.173.194:59049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a823b098-2e4f-3cb0-5177-000041d47384","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/bin.sh","pattern":"[url:value = 'http://95.106.249.19:11817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfffcae-8efb-7bce-ece1-0000b29b7484","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/i","pattern":"[url:value = 'http://95.106.249.19:11817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775984fc-8c3e-b062-c655-000005f07b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://export.kesug.com/img_212250.png","pattern":"[url:value = 'https://export.kesug.com/img_212250.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef685e7a-13de-2f22-120a-0000ca413177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/bin.sh","pattern":"[url:value = 'http://42.235.6.8:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d5e8c9-0d89-79ea-fa7c-00000a16b786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98e8365-7995-d95b-4dbd-0000a0c42903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--858e96b1-8b1f-ab04-c4db-00001df152b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d5fd1d-81d1-304d-3c64-0000b723cc32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735f38d6-502a-cde8-720c-00009139fcc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe887a5d-8170-c3d5-3a5d-0000a6a162dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsel","pattern":"[url:value = 'http://94.154.43.76/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340d76ee-a392-90f2-e301-000050de1afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/a.sh","pattern":"[url:value = 'http://94.154.43.76/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13df92b2-788a-d877-f36b-000067b7481e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72754ec7-8f90-c428-8a1b-00002e032221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8bbcd8-9ee6-4a1f-e02d-000045f69ab1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.201/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd8b90e-dd5e-ca54-d37f-000043e727e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64d8a224-cb9d-7715-6724-0000df0b2f7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24f6eca-1fdc-6fb4-e536-000075534ca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv7l","pattern":"[url:value = 'http://94.154.43.76/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80790c48-9352-e450-3018-00000f931fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv5l","pattern":"[url:value = 'http://94.154.43.76/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd1f39e-9457-14b9-c163-0000cdbe8095","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0158f09c-8a84-fab1-58a1-000071733c40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.201/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a7880e-1652-d555-0c08-000045004c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd15b32-c969-f7cd-283a-00007b0212c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc609409-c55c-4696-4c84-0000a33850db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740a12cb-394d-81fc-d83c-0000f1ada5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a292b1-d5be-b2ae-f088-00004b45fb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mips","pattern":"[url:value = 'http://94.154.43.76/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ee603a-837f-2234-c8ce-0000ffc581e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.x86_64","pattern":"[url:value = 'http://94.154.43.76/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab545f8b-a2e3-97cd-17b3-000048336512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv6l","pattern":"[url:value = 'http://94.154.43.76/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a483bb1d-893c-cd0b-1eef-00009308d0c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.246/svchost.exe","pattern":"[url:value = 'http://217.60.241.246/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b82305-2fec-6fe1-d1aa-000089aecbc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764cac92-451e-f157-50ee-00007739d718","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99623d09-3b2c-ed78-feb5-000032f33672","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv4l","pattern":"[url:value = 'http://94.154.43.76/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40de9b3c-df35-4432-199e-00002ad9f518","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/i","pattern":"[url:value = 'http://42.235.6.8:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--917266c2-4171-93e7-4aac-0000ebf1db20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904f095d-ff19-2541-0e86-0000a7b31f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/debug_main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7583c63f-6fa5-eef8-5020-000032504524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487500dc-1d70-75ac-0747-0000508a0c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554251cb-8bfc-d956-b6bb-000052fe70f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7c615-6af6-c371-d24a-00003b89624b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b44725fd-763a-3cfc-ef06-00004921a14d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa62cf24-5ecf-5ba8-7ee1-000024ec60cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745bfd58-0ec4-da60-9082-0000cb722d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/debug.dbg","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a5ec7f-4cac-01e4-0384-0000ffac8117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18bf2c3-d956-d8ac-b609-00003b7fb491","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097f4168-c9ee-19fc-cef3-00009b6acdd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec76c6f-1002-1b89-f95d-00007bb5bae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29dfdca9-9c3f-dfa1-2f7c-0000193e663e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed8ec3f-b16b-4e61-78be-0000a182015b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48b9849-dd3d-1123-5136-000048cfa9af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca7f664-dee4-20f0-05c2-0000b1fc56ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d1bd85-1997-beac-febc-0000b337aeb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm5","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35379f3-1a2d-c99e-bde6-00004f6b4a15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/spc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c115c7aa-dc94-2390-eefa-0000c9ff38bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb6c099-fe49-f279-efed-0000ef4c0748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sh4","pattern":"[url:value = 'http://94.154.43.76/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3436890b-ac21-e98f-c2e2-0000ddd81ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.arc","pattern":"[url:value = 'http://94.154.43.76/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c563717-7973-8fab-0784-0000ff10a4e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sparc","pattern":"[url:value = 'http://94.154.43.76/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8158b4-7738-fc38-7a0d-0000defc7773","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.powerpc","pattern":"[url:value = 'http://94.154.43.76/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b2c817-1362-d380-dc54-0000cb537fdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.i486","pattern":"[url:value = 'http://94.154.43.76/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09aabc-a8e2-0375-cc52-00001506ae20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ea667-dd33-8836-0ef2-00004bb32db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.m68k","pattern":"[url:value = 'http://94.154.43.76/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f17f9e-00b7-02d4-81e3-000061e677ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.76/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0156c4a4-5f35-6f53-313e-000007995698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/bin.sh","pattern":"[url:value = 'http://60.189.111.145:37976/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df82d7c0-1f63-beef-53bb-0000a81662e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/k","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c8952d1-76ee-bcf5-e155-000064d41ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/i","pattern":"[url:value = 'http://60.189.111.145:37976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba62983-0ec8-6be1-40c7-00006cf679ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:43963/i","pattern":"[url:value = 'http://112.238.178.200:43963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bdc8ee-80f2-f01b-ece8-0000e1f92ae2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/bin.sh","pattern":"[url:value = 'http://110.39.228.78:49446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1daab-8ba2-7915-0794-0000ab583801","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/i","pattern":"[url:value = 'http://110.39.228.78:49446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be8088f-d4a6-b8ce-b982-00007817f9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7646424755/gX8992r.bat","pattern":"[url:value = 'http://62.60.226.140/files/7646424755/gX8992r.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1764f6f-a562-b907-fbfc-0000797a4e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.103.246:42822/i","pattern":"[url:value = 'http://27.37.103.246:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4784a5-7f8a-bf49-a0c7-00009c925325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e33c49e2-7245-8388-ac66-000050c4c948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/tzb10mmujurn","pattern":"[url:value = 'http://192.162.199.249/tzb10mmujurn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b1818c-821e-b7ed-ff6e-000082a78ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/y6b3fuzj0w6pt97e","pattern":"[url:value = 'http://192.162.199.249/y6b3fuzj0w6pt97e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fa3049-48df-e511-986c-00000913de02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/x86","pattern":"[url:value = 'http://154.90.70.23/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3a53a6-3d5d-2c29-057f-00007e19b387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/m68k","pattern":"[url:value = 'http://176.65.139.228:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df672c76-f87f-1412-b700-00004eedcec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b591a12b-7841-eaf2-7aa8-0000f07ac260","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/sh4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466e7dcc-a419-2ff9-1f6c-00005c586128","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm7","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c3437c-1184-eb69-d2c1-000070a45b96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/ppc","pattern":"[url:value = 'http://176.65.139.228:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31694d5a-b6d7-1732-04ed-0000e4e4064d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm6","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52af87b5-a153-fba3-5d9a-00000548c9f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/ezaenul9","pattern":"[url:value = 'http://192.162.199.249/ezaenul9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f2041b-49f6-6ac1-1dc7-0000d3da5f7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/8w6vq50fsu","pattern":"[url:value = 'http://192.162.199.249/8w6vq50fsu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b86782-e3a5-d91b-c8f8-0000f9c14cab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/1edjop4tlj2d","pattern":"[url:value = 'http://192.162.199.249/1edjop4tlj2d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f8db96-d154-f29f-4965-0000dc42e727","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/zeb8cgwmkkpvu7pc","pattern":"[url:value = 'http://192.162.199.249/zeb8cgwmkkpvu7pc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b38603e-b48f-58f5-9164-0000977c5e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/1vo6lm4y50k3ww0f","pattern":"[url:value = 'http://192.162.199.249/1vo6lm4y50k3ww0f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2751215c-3a61-50d4-974b-00000123e6dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://flooriscoveringworld.com/BOBBIN.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/BOBBIN.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c07062e-b707-fdb8-f241-00000e9b1c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1558f4c-80ea-8396-53e0-00002aec1034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/8jot5vdohds0imt4","pattern":"[url:value = 'http://192.162.199.249/8jot5vdohds0imt4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe878897-1120-e0df-6872-00008cacefe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/bin.sh","pattern":"[url:value = 'http://61.53.219.139:36865/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc69ef81-5e1f-1a60-3eb2-0000f909021a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/i","pattern":"[url:value = 'http://61.53.219.139:36865/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7016cfd9-f350-0f32-fb42-0000ce9835b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/bin.sh","pattern":"[url:value = 'http://175.146.6.50:52389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90859175-f10d-0b7b-d2a3-000053c42371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/bin.sh","pattern":"[url:value = 'http://123.14.73.174:46201/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--388a4911-a4d8-3abd-0cb8-0000c54412a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.67.33.209:34699/i","pattern":"[url:value = 'http://80.67.33.209:34699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd49391c-db68-d2cd-53b2-0000e0ce6b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/i","pattern":"[url:value = 'http://123.14.73.174:46201/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee7b6c-4ea4-be91-b6ff-00003ec21826","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/i","pattern":"[url:value = 'http://175.146.6.50:52389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de07606-f629-4c7a-df91-000029940589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.59.112:44682/bin.sh","pattern":"[url:value = 'http://42.53.59.112:44682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b1fb6-b886-1795-2882-0000044641af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/bin.sh","pattern":"[url:value = 'http://196.189.3.1:42472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d3c2e3-ac98-8145-7b26-0000b9c41d60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f9c7b","pattern":"[url:value = 'http://5.182.210.174/3f9c7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb44524c-2c76-d632-dedb-000074ca8bbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/659716","pattern":"[url:value = 'http://5.182.210.174/659716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d943da75-a810-9406-32f9-0000324ed273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ec54e5","pattern":"[url:value = 'http://5.182.210.174/ec54e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db4a6d7d-8a84-59f0-bab7-0000ee050312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5f1c","pattern":"[url:value = 'http://5.182.210.174/5b5f1c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ba63bc-7791-2a58-744e-00005d562025","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/068f87","pattern":"[url:value = 'http://5.182.210.174/068f87']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac224e04-0ff3-f2ef-8fd7-000048e5ceb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/126678","pattern":"[url:value = 'http://5.182.210.174/126678']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fd4525-67f1-6cae-2a04-000084f2f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b59af2","pattern":"[url:value = 'http://5.182.210.174/b59af2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab20224-5f07-0f86-c35d-0000dc6b1b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/341d04","pattern":"[url:value = 'http://5.182.210.174/341d04']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448540d6-1bc9-eef8-0a03-000010d934c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/085175","pattern":"[url:value = 'http://5.182.210.174/085175']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa5b051-95ea-5e99-2ba8-0000db71f8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f971dc","pattern":"[url:value = 'http://5.182.210.174/f971dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b877778-30ca-9d2a-c755-0000bd3685ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfde3b","pattern":"[url:value = 'http://5.182.210.174/bfde3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b794cac-3abf-5070-3d2b-0000510128a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2778ce","pattern":"[url:value = 'http://5.182.210.174/2778ce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c108b07-560c-c5d7-9f43-000034f90243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b0a2e4","pattern":"[url:value = 'http://5.182.210.174/b0a2e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf67f02-a387-e35a-4e56-00000b8ba35b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b2f83","pattern":"[url:value = 'http://5.182.210.174/9b2f83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd2c507-8f1c-e969-86ec-00002f69c303","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/27f7dd","pattern":"[url:value = 'http://5.182.210.174/27f7dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ae8bd9-44d1-e432-c886-00009f37849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1096dc","pattern":"[url:value = 'http://5.182.210.174/1096dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f0bc36-d394-6d21-8984-0000215dcfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm5","pattern":"[url:value = 'http://154.90.70.23/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfedd1a-e902-6083-b8ab-00008b54072d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm7","pattern":"[url:value = 'http://154.90.70.23/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1d183c-5c8e-380b-3334-0000381aad86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b318c0","pattern":"[url:value = 'http://5.182.210.174/b318c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e708d-d89f-add6-113b-000025130a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a8ac8a","pattern":"[url:value = 'http://5.182.210.174/a8ac8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3347e95f-2a0a-1344-aeee-0000f492b086","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/33d663","pattern":"[url:value = 'http://5.182.210.174/33d663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92c1251-4f1d-4202-1123-0000d3241dc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be1fde","pattern":"[url:value = 'http://5.182.210.174/be1fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b886c7a6-ef6c-7017-9e13-0000a9e30358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mips","pattern":"[url:value = 'http://154.90.70.23/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411b488a-26cb-f8a0-9491-0000aa11d758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb2746","pattern":"[url:value = 'http://5.182.210.174/eb2746']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82e8fb0-d26b-af9c-17bf-000051e5322d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/194957","pattern":"[url:value = 'http://5.182.210.174/194957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97600ffc-0f97-78ee-c73a-00008282b21a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/67f55e","pattern":"[url:value = 'http://5.182.210.174/67f55e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c594e6c-7e39-25de-c950-0000c9f6fc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c747be","pattern":"[url:value = 'http://5.182.210.174/c747be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--661ff4f7-722e-7d0b-7da6-0000b92509d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/i","pattern":"[url:value = 'http://196.189.3.1:42472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5532ea74-6f99-eb7a-084e-0000cbc8cf91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/i","pattern":"[url:value = 'http://115.57.44.181:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f13e747-827b-c7b1-fc6c-00001422fa71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.231.45:33771/i","pattern":"[url:value = 'http://105.186.231.45:33771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1a335-cf8d-4dfb-4174-0000a2286f44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/bin.sh","pattern":"[url:value = 'http://115.48.136.66:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86da0bb-e6c5-9832-32a4-0000a079f5ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c5f370f-d66b-82e3-f6c5-000094f9eede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d26c3c-1966-f1f9-203b-00007892ce3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/i","pattern":"[url:value = 'http://115.48.136.66:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830ed02e-1ce1-4341-ee3e-0000a025c6df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.188:46150/i","pattern":"[url:value = 'http://182.117.68.188:46150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59aae0c9-5621-2b5d-8289-000002755122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/i","pattern":"[url:value = 'http://138.204.196.136:51078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9c1449-04f4-8e49-62e8-00005c2afb77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/bin.sh","pattern":"[url:value = 'http://120.84.214.85:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac6a726-b06a-58f5-4cc2-00005bf7329d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/i","pattern":"[url:value = 'http://120.84.214.85:32896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2349ff24-4a5a-f15f-812f-00005716aff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.72.79:33457/i","pattern":"[url:value = 'http://182.120.72.79:33457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bbb9bc-8e21-59af-1a16-000051863dda","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/bin.sh","pattern":"[url:value = 'http://119.185.241.8:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--176b9e53-4c26-ab98-46f4-0000af2eca14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/i","pattern":"[url:value = 'http://119.185.241.8:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d728e9-9f54-6ac2-f674-000017af4785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.168.69.141/p.sh","pattern":"[url:value = 'http://83.168.69.141/p.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2dbe79-f2ad-f2c7-a640-000090cfc9ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/bin.sh","pattern":"[url:value = 'http://42.225.56.37:44489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b4859d-13b2-48b1-d483-00008b457561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/i","pattern":"[url:value = 'http://42.225.56.37:44489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21e1f45-74c4-6118-5f5c-0000b572398a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/rvn.exe","pattern":"[url:value = 'http://178.16.54.109/rvn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fba5bde-76a8-7e0e-5ec1-0000019a8386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/bin.sh","pattern":"[url:value = 'http://123.8.54.39:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e88501-0d3f-0d55-b4d7-00001d91296d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ccd071-3fae-2a99-d2da-0000b2af0c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:48818/i","pattern":"[url:value = 'http://196.189.35.172:48818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b498b6-5ad4-88f2-4519-00004031b0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.94.15:56422/i","pattern":"[url:value = 'http://163.142.94.15:56422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fee29e-b31c-c120-2fee-000035b69e36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda73828-7096-6f8e-3547-00009d05d88b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278e7475-7623-c183-9549-0000e71ffde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.93.89.72/wget","pattern":"[url:value = 'http://185.93.89.72/wget']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33844ca-8424-6da5-fc14-0000d4596404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102ca43c-901b-9929-4eb4-000021b44c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf40cd4e-727f-fcc0-b454-000086fa0d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a36910d-9dc3-2d5f-2fe0-00005b4ef805","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/iokasg181fteasmm.nce","pattern":"[url:value = 'http://151.241.154.105:8888/1/iokasg181fteasmm.nce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6882a095-17a1-fe93-da3f-0000a21f6138","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn","pattern":"[url:value = 'http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc547c44-9bd7-e446-94eb-00006c69c319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f38155-dadc-764e-98d4-0000982da349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caa97b6-c9a4-93d9-4cf8-00003da691ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45fb7d","pattern":"[url:value = 'http://5.182.210.174/45fb7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8169458-8edd-ef3f-a7a8-00007720c051","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1cc53b","pattern":"[url:value = 'http://5.182.210.174/1cc53b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db67581-31e9-85d3-e80b-000064cbaf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/140e8d","pattern":"[url:value = 'http://5.182.210.174/140e8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93fa924b-cf7e-2319-69d6-000096a6d486","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86361f","pattern":"[url:value = 'http://5.182.210.174/86361f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5539491-89b1-08e0-2a5b-0000efe8d8dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/938392","pattern":"[url:value = 'http://5.182.210.174/938392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06237a6a-a557-af03-b371-0000c681eb50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cea41","pattern":"[url:value = 'http://5.182.210.174/3cea41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3315ae1-1441-eef0-73f6-00004ddc4a1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/989926","pattern":"[url:value = 'http://5.182.210.174/989926']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c701a77a-6837-5dc1-2dae-00003b51b257","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ea0","pattern":"[url:value = 'http://5.182.210.174/340ea0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7403d89b-45b4-ca4f-3705-0000d5d80c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a041d7","pattern":"[url:value = 'http://5.182.210.174/a041d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b98ae7f-4a24-5640-5cf5-0000658be0d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d085b","pattern":"[url:value = 'http://5.182.210.174/2d085b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d89e8f-9fdd-6e14-0305-000079d5e451","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b60846","pattern":"[url:value = 'http://5.182.210.174/b60846']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09191158-82c2-7d28-b777-0000a16bb17f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2fa8f","pattern":"[url:value = 'http://5.182.210.174/a2fa8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e57f7-a594-81d5-5c06-00006dd1e667","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b94fb7","pattern":"[url:value = 'http://5.182.210.174/b94fb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb5917-a7e2-6daf-0b5f-00008ad00d3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cddd60","pattern":"[url:value = 'http://5.182.210.174/cddd60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2491f318-149c-bc21-82bc-00005edaa6ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/11ac33","pattern":"[url:value = 'http://5.182.210.174/11ac33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e9f3f2-cd21-735a-3f83-0000a4710ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/428768","pattern":"[url:value = 'http://5.182.210.174/428768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b42979-1851-f99a-6c11-0000271cfeba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d27e5","pattern":"[url:value = 'http://5.182.210.174/7d27e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3864f346-532e-6593-5d4b-0000f52fa3db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/533721","pattern":"[url:value = 'http://5.182.210.174/533721']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d00cf28-2f24-c8fb-3617-00008e4a991a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83792e","pattern":"[url:value = 'http://5.182.210.174/83792e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3390cab-4575-7a03-0e4a-0000d2eb3098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5e3a4","pattern":"[url:value = 'http://5.182.210.174/e5e3a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c022128b-de4e-2d2c-236d-0000b4828038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/55a639","pattern":"[url:value = 'http://5.182.210.174/55a639']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec07c45-ed5e-47c6-5eb4-00009ac9fe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ced603","pattern":"[url:value = 'http://5.182.210.174/ced603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99163c40-cbf6-a368-4685-000003cb0459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/818df1","pattern":"[url:value = 'http://5.182.210.174/818df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979641f9-17b6-24a5-7eba-0000be6d4553","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sh4","pattern":"[url:value = 'http://217.60.195.127/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff989ce-4669-ed21-a8da-000041679771","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.i486","pattern":"[url:value = 'http://217.60.195.127/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3141626-f0ef-6e17-9c12-0000cef41ee5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sparc","pattern":"[url:value = 'http://217.60.195.127/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c04822f-1b6d-e534-fece-0000c9bf7adf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.mipsrouter","pattern":"[url:value = 'http://217.60.195.127/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c5e7be-30e5-fee4-a1a2-0000c187c516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.m68k","pattern":"[url:value = 'http://217.60.195.127/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b5b01a-ee06-2740-54e7-0000ba098ac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.powerpc","pattern":"[url:value = 'http://217.60.195.127/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf89588e-32b9-a833-7165-0000f9db9f33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd412f","pattern":"[url:value = 'http://5.182.210.174/bd412f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d805ea1a-080a-d13d-f89f-0000313c8c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c819f","pattern":"[url:value = 'http://5.182.210.174/2c819f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a8269b-8b55-d124-66e6-00001ee3ba00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e19e6a","pattern":"[url:value = 'http://5.182.210.174/e19e6a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8807631c-2bf8-642a-876c-000031feb2f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae1209","pattern":"[url:value = 'http://5.182.210.174/ae1209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49bf9a9-9c05-4d09-eaf2-0000807c33cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/820635","pattern":"[url:value = 'http://5.182.210.174/820635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70d5a6ba-94de-df5a-3022-0000325b032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/85c412","pattern":"[url:value = 'http://5.182.210.174/85c412']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d244a60-5455-8d02-c61c-00008a34cdcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb1880","pattern":"[url:value = 'http://5.182.210.174/eb1880']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080072b6-5169-40e6-9776-000028acdc70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f7598","pattern":"[url:value = 'http://5.182.210.174/3f7598']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56520bb9-be5f-af88-4eb9-000058686974","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea1763","pattern":"[url:value = 'http://5.182.210.174/ea1763']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a843a6e7-ccd4-58f3-2e8e-00004f538866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1da29","pattern":"[url:value = 'http://5.182.210.174/c1da29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c82efabf-0ca2-81fa-d8aa-000008f1f8b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/446eba","pattern":"[url:value = 'http://5.182.210.174/446eba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3978c144-3d2e-5dc2-0e95-00000fda7f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1832e","pattern":"[url:value = 'http://5.182.210.174/d1832e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11576a1c-89ee-c116-6807-00008b5758d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/935428","pattern":"[url:value = 'http://5.182.210.174/935428']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea0732f-018c-6f1f-e981-000015a3cde0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/i","pattern":"[url:value = 'http://162.246.26.77:54746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8136a7f-39f2-f27b-651e-0000b077a898","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://15.204.176.145/xmrig.exe","pattern":"[url:value = 'http://15.204.176.145/xmrig.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e42fd61-7e7e-1610-c958-000084a35b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.104.147/d/build_x64","pattern":"[url:value = 'http://87.120.104.147/d/build_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2342f0-d3ec-3a1f-07f3-0000219a6a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://frtkvnpa.xyz/crypted.ps1","pattern":"[url:value = 'https://frtkvnpa.xyz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4ee807-e06e-8d93-af65-0000f6fa4603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojkcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojkcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ccd6fe-5431-9bb6-464e-00000e9cf7b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/bin.sh","pattern":"[url:value = 'http://182.127.64.81:42389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841fb122-70ab-739f-0b31-0000bf6945a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/i","pattern":"[url:value = 'http://182.127.64.81:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09531390-8ca4-6550-b7ff-00009ae8bc8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb033d36-64b2-2c75-f961-00002771c543","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?","pattern":"[url:value = 'https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b0713-de17-afab-7816-00002f320743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe","pattern":"[url:value = 'https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e686e3a1-bdad-e1b3-97e2-00005d44f425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mbcasesores.com/tap/BBVA_pdf.zip","pattern":"[url:value = 'https://mbcasesores.com/tap/BBVA_pdf.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e470077-4a14-e8ff-6fc0-00004d70ef36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:39029/i","pattern":"[url:value = 'http://110.36.13.229:39029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56018c1-4a72-8ca2-a207-0000abb2402d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/bin.sh","pattern":"[url:value = 'http://115.61.107.237:53984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad04935-54bd-2684-9f9d-000071be4467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:47068/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451c9414-3da3-ec21-a175-0000ee755d16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/bin.sh","pattern":"[url:value = 'http://59.96.138.212:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f027648-2d56-a089-a837-00001d942615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/i","pattern":"[url:value = 'http://59.96.138.212:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f856849d-9ebf-f1dd-93f7-0000dc5ac77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/bin.sh","pattern":"[url:value = 'http://182.122.193.178:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ed422-b33c-55a8-018f-00009d568b81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/i","pattern":"[url:value = 'http://182.122.193.178:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e714258-cf69-c11c-2362-0000739456e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.239.221:32941/bin.sh","pattern":"[url:value = 'http://115.52.239.221:32941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab40c9de-ba6e-4ec4-d387-00001f8570a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.121.142/a3f8d2/kaizen.arm","pattern":"[url:value = 'http://196.251.121.142/a3f8d2/kaizen.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f44332e-df7a-620e-850c-0000437fce62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/i","pattern":"[url:value = 'http://27.156.154.3:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb34f84-ae86-4eeb-ff80-000037c34785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/bin.sh","pattern":"[url:value = 'http://27.156.154.3:40709/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b405e4b0-0762-d236-8bc7-00007b50796d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/bin.sh","pattern":"[url:value = 'http://103.31.103.204:42349/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d0c8acf-29b8-3d2b-9faa-0000a65fa834","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/i","pattern":"[url:value = 'http://113.231.9.63:39328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--405af7c0-4c22-e23b-ab15-0000b59a1c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/i","pattern":"[url:value = 'http://115.61.107.237:53984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0551682b-814b-7bcb-4f48-000071266c67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.115.246.124:41208/i","pattern":"[url:value = 'http://119.115.246.124:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07521553-e971-987b-8f4f-0000285c038c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/i","pattern":"[url:value = 'http://182.126.117.59:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9b44c8-67d1-29c1-dbc6-000098024235","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/bin.sh","pattern":"[url:value = 'http://182.126.117.59:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf8967-ee37-fbd3-af9d-0000587464e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/i","pattern":"[url:value = 'http://103.31.103.204:42349/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee6d220-c71d-85e5-e911-0000365ce3d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/i","pattern":"[url:value = 'http://24.95.54.96:47647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0092fb28-057f-0497-cc29-00002b6198e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/bin.sh","pattern":"[url:value = 'http://211.158.166.117:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189faae8-bf31-475e-610f-000067df1e18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/bin.sh","pattern":"[url:value = 'http://24.95.54.96:47647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9d4b0c-e251-bb46-2e86-0000605fc526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/i","pattern":"[url:value = 'http://42.224.70.213:38527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee221c3-0fe1-3e8d-7da4-0000a504fb1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/bin.sh","pattern":"[url:value = 'http://116.138.249.233:41996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad21749-d646-4a4b-3454-0000e663c425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.122.152:46868/i","pattern":"[url:value = 'http://123.14.122.152:46868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c2cbc-3e0e-d2d5-0e03-000058b014db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/i","pattern":"[url:value = 'http://123.129.130.213:51777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b7db2-8c0e-c750-b319-00005484e0e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/i","pattern":"[url:value = 'http://123.13.80.147:46406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288767f1-18f9-4228-4a24-00001910b782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/bin.sh","pattern":"[url:value = 'http://115.55.55.83:33095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe32a482-315b-e548-6b6f-0000147ba2d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/i","pattern":"[url:value = 'http://222.137.118.107:60191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c211ded0-f6f9-4fd9-1b97-00000cf4b83f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/i","pattern":"[url:value = 'http://175.165.71.238:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--363f3b01-6b32-24b6-4ee3-00007f60edaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/bin.sh","pattern":"[url:value = 'http://115.50.20.6:57418/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56664bf2-1cab-8714-72ab-0000f56ab0e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.230.104:46320/i","pattern":"[url:value = 'http://123.10.230.104:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--690fe372-ce4d-bcbe-8f7e-000046ef4447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/bin.sh","pattern":"[url:value = 'http://115.55.131.216:52075/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d925b8b-2091-55f0-c995-00005e58c735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.216.12:43983/i","pattern":"[url:value = 'http://123.148.216.12:43983/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70da5c47-50be-0db1-3191-0000f1abf709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.211.115:43071/i","pattern":"[url:value = 'http://222.142.211.115:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8c4408-b09d-f62a-3a71-00008a7e51b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.139.79:39515/i","pattern":"[url:value = 'http://112.93.139.79:39515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6f9577-a170-53ee-1596-000074f339b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.173.117:58187/i","pattern":"[url:value = 'http://182.115.173.117:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b759b38-ff41-f9ca-326f-00006cd427bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.37:35671/i","pattern":"[url:value = 'http://120.84.214.37:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b42a93d6-5170-5e57-2074-0000fca51c97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/bin.sh","pattern":"[url:value = 'http://115.52.234.119:59998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b27a70-cd1c-15cd-4ffc-000050386efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/bin.sh","pattern":"[url:value = 'http://123.129.130.213:51777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cf24f7-9fb7-d9e6-cf37-0000bece1ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.158.185:45619/i","pattern":"[url:value = 'http://175.147.158.185:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff92d2dd-0ce2-9d3b-1f1c-0000dc28b6c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/bin.sh","pattern":"[url:value = 'http://124.131.164.138:48771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ecd6ae-44b8-748f-fc8e-0000594ef9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.217.164:45145/i","pattern":"[url:value = 'http://117.24.217.164:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4ce5e4-e4e1-d915-fe14-000006fe373e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/i","pattern":"[url:value = 'http://115.209.244.81:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0674594f-f0dd-5f8d-db23-0000b3a1dc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/i","pattern":"[url:value = 'http://124.131.164.138:48771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcff472a-27b3-818c-3524-00005396b06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/i","pattern":"[url:value = 'http://119.183.53.105:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e77872-74f0-2c74-b2ef-00007a8b7d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/i","pattern":"[url:value = 'http://113.239.223.235:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb75142-eafe-9adf-e8f6-000071cd5687","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/bin.sh","pattern":"[url:value = 'http://113.239.223.235:54830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9efe06-cce4-6467-4342-00006d734ba7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/i","pattern":"[url:value = 'http://196.189.98.77:39424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efb68f9-a1e0-e744-5468-0000c928c784","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/bin.sh","pattern":"[url:value = 'http://39.73.44.67:44345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c60ca4-1b18-0af3-15bf-0000f4b5988a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.189.247:57147/i","pattern":"[url:value = 'http://115.55.189.247:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9267163e-4325-66cb-539d-000015cdcc8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/i","pattern":"[url:value = 'http://182.117.68.26:55093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7983b7-c993-990e-a415-00000d10af57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/i","pattern":"[url:value = 'http://219.156.93.123:50459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2024832f-1beb-baf6-a5e1-0000ebca6b0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/bin.sh","pattern":"[url:value = 'http://123.5.124.47:46095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a70a56-5991-ea06-f25e-00002e1ac9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/i","pattern":"[url:value = 'http://27.207.247.91:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cd339f-cbc4-b4d4-49ae-00001387619c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/i","pattern":"[url:value = 'http://182.120.4.111:56629/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1031a12-030d-d8a8-7755-0000c2f09910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/bin.sh","pattern":"[url:value = 'http://182.121.179.219:53168/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e79d5d2-b020-2186-fdf2-0000afed5cac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/bin.sh","pattern":"[url:value = 'http://27.207.247.91:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13379293-2bca-53c1-d7ce-0000f0e90e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/bin.sh","pattern":"[url:value = 'http://219.156.93.123:50459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd4eb65-8cbc-a151-58bd-0000865e7074","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.69.71:54203/i","pattern":"[url:value = 'http://105.224.69.71:54203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4c6477-ad0c-d5bc-682a-0000db3398cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/i","pattern":"[url:value = 'http://123.5.124.47:46095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eaaf07-1051-cd2a-7fd5-00009879f86a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.248.132:46446/i","pattern":"[url:value = 'http://175.147.248.132:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7641-5e93-07a5-e63c-00006d2f1087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.195.40:53219/i","pattern":"[url:value = 'http://112.198.195.40:53219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a987e109-15b5-0f91-2ea6-0000cf1eaaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.48.28.98:35726/bin.sh","pattern":"[url:value = 'http://36.48.28.98:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e56d36-79b2-9ae8-504d-0000d4a3dfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/bin.sh","pattern":"[url:value = 'http://182.120.4.111:56629/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4852ce6a-f41e-563c-1021-0000612ac108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.146.92.46:40975/i","pattern":"[url:value = 'http://117.146.92.46:40975/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b9d3d2-03c9-70b5-6b15-000062d33975","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.30.67:40773/i","pattern":"[url:value = 'http://123.8.30.67:40773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac687dd2-a42c-0be5-dcc3-0000a3834a8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/bin.sh","pattern":"[url:value = 'http://115.55.80.26:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5618e4bb-e0b9-fc13-cbf5-00001403fab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.121.20:34150/i","pattern":"[url:value = 'http://115.49.121.20:34150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc7f3903-e1c5-5761-9604-0000380e1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.54.168:47860/i","pattern":"[url:value = 'http://182.127.54.168:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7928e-df85-0786-8ea5-00007f73fc18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.171:36842/i","pattern":"[url:value = 'http://219.155.229.171:36842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4518711c-2fe5-d5a5-2d00-0000c402cf1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.65.125:37575/i","pattern":"[url:value = 'http://115.52.65.125:37575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1329fc56-8fb2-cc02-a576-000066fc2162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/bin.sh","pattern":"[url:value = 'http://27.159.154.179:49141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d3377a-6a44-81db-6cda-000022cd8b56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.6.71:46382/bin.sh","pattern":"[url:value = 'http://119.184.6.71:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25ce3c0-e39b-88b5-b751-000072576edc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/bin.sh","pattern":"[url:value = 'http://219.156.184.4:33396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8933f8a0-f0ed-673e-9429-00004ebb12e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/i","pattern":"[url:value = 'http://115.55.131.216:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bba139a-fa64-1ae5-21d1-00004ea963e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.5.189:45058/i","pattern":"[url:value = 'http://110.136.5.189:45058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a682359-fbec-3057-70ed-00006adbceb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/bin.sh","pattern":"[url:value = 'http://115.53.209.13:43098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74866c31-cec4-2c10-cb92-00001c4cc8c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.106.241.72:39541/i","pattern":"[url:value = 'http://176.106.241.72:39541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--492ee127-85ec-b06f-6666-000052c7dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/bin.sh","pattern":"[url:value = 'http://123.129.2.24:55703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb5ee0c-cce1-2f47-89bb-0000869a2565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/bin.sh","pattern":"[url:value = 'http://123.11.11.28:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c0d69c-e212-d3ed-0e90-00004c79a4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.234.38:33146/i","pattern":"[url:value = 'http://182.113.234.38:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b8a8add-b8bf-df4d-77d5-0000bd26f969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.5:34195/i","pattern":"[url:value = 'http://112.198.193.5:34195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf491ad-d3b9-9668-64b0-0000f75c069f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.123.46:35446/i","pattern":"[url:value = 'http://27.215.123.46:35446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbabbf8-a4da-b35b-cd33-000063244aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/i","pattern":"[url:value = 'http://115.55.55.83:33095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d22fd-a01b-336d-cd03-000090699f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.198.107:45304/i","pattern":"[url:value = 'http://115.55.198.107:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dc52e5-e9c1-4fff-21da-00005cb7f695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/bin.sh","pattern":"[url:value = 'http://115.209.244.81:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc4a3e9-8eb1-ccf9-ffd7-00004b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.241.88:59418/i","pattern":"[url:value = 'http://115.52.241.88:59418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825402a8-65d9-e3d4-06df-00007d2dbe9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.104.54:56510/i","pattern":"[url:value = 'http://112.248.104.54:56510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68eb0bb6-f10e-7080-9ae1-0000e189255f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.224.99:37425/i","pattern":"[url:value = 'http://125.43.224.99:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35c0028-28e1-ab77-8ccb-0000a0f54f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.227.39:56994/bin.sh","pattern":"[url:value = 'http://115.55.227.39:56994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3abc6a7d-8131-410a-bd19-0000f59ac21d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/bin.sh","pattern":"[url:value = 'http://123.13.80.147:46406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48f842a2-3dc3-a5d1-3226-00005fa39b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/bin.sh","pattern":"[url:value = 'http://210.208.111.220:36372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a66b861-5d55-9194-49c1-000035ae047e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/bin.sh","pattern":"[url:value = 'http://112.239.113.122:44773/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc95c9e4-5b44-8fbf-bbad-0000c0c036c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/bin.sh","pattern":"[url:value = 'http://113.230.81.126:50462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0791e46f-e365-a3fb-516b-00000ae75c8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/bin.sh","pattern":"[url:value = 'http://123.14.88.114:47055/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78523110-5188-7ac8-bfb4-0000ab68d1cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/i","pattern":"[url:value = 'http://115.50.20.6:57418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bc382b-d03c-5451-79ca-00001526afa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/Mozi.m","pattern":"[url:value = 'http://37.78.176.5:45921/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e77548-5e7c-f4e8-89d2-0000e6d9638b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/i","pattern":"[url:value = 'http://115.55.80.26:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c383941b-6fb1-74f8-86cc-000085999478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/bin.sh","pattern":"[url:value = 'http://113.231.9.63:39328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6361d3-a55b-145e-9720-0000d3e4a459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/i","pattern":"[url:value = 'http://112.239.113.122:44773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3e76e0-2a53-7024-e82b-0000e59056d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/bin.sh","pattern":"[url:value = 'http://123.13.30.198:35585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e4d2ce-5b43-3bf9-a3f2-00007b2e7f51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.12.14:38104/i","pattern":"[url:value = 'http://221.15.12.14:38104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a903a4e-7b72-f9a3-0e59-00005bd4a873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.67.89:44844/i","pattern":"[url:value = 'http://182.115.67.89:44844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c788283-311b-2c6e-f9b1-0000406ee3dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/i","pattern":"[url:value = 'http://115.52.234.119:59998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b073c176-95ed-775e-9b77-0000bfe79775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/bin.sh","pattern":"[url:value = 'http://222.137.158.38:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3269aa0a-8be8-eb1c-536a-000099674dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/bin.sh","pattern":"[url:value = 'http://222.137.118.107:60191/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80419a25-1197-d509-d3b4-00004085d2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/i","pattern":"[url:value = 'http://123.14.88.114:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edccb81f-384a-44b4-6f9c-00005dc20b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/bin.sh","pattern":"[url:value = 'http://119.183.53.105:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88743f2d-49bd-bd05-a1d7-0000cb550f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/bin.sh","pattern":"[url:value = 'http://42.224.70.213:38527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ea64fa-09b6-c716-095a-00000d6b1618","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/bin.sh","pattern":"[url:value = 'http://42.224.99.104:58376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31a01fe-2889-adee-970d-0000af55d3bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/bin.sh","pattern":"[url:value = 'http://182.117.68.26:55093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6264dd02-6dd9-d50f-9071-000089bb8fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/i","pattern":"[url:value = 'http://115.51.196.94:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd739f83-24a9-96be-8a6a-000028d05699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.187:43642/i","pattern":"[url:value = 'http://42.230.157.187:43642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32545db-da70-9e7b-ba94-0000b3a0f0bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/bin.sh","pattern":"[url:value = 'http://115.57.44.181:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9043af08-3d9b-4261-4e28-00003c2fa48a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/i","pattern":"[url:value = 'http://222.137.158.38:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa181ca0-2709-43ed-ae22-0000d815dd3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/i","pattern":"[url:value = 'http://182.116.10.124:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c8af6b-e400-4480-b244-00000cd48bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.130.28:46269/i","pattern":"[url:value = 'http://196.189.130.28:46269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b59c9c6-bebf-625a-d90e-000069db2a60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/i","pattern":"[url:value = 'http://116.138.249.233:41996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc0f71f-35d9-8a0b-1962-000023951414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/bin.sh","pattern":"[url:value = 'http://175.165.71.238:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--207d629a-b7fd-faec-51ea-00007d8d7c0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/bin.sh","pattern":"[url:value = 'http://115.51.196.94:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1ec47c-935a-72a5-5f2e-0000fc04fb48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.102.135:34775/i","pattern":"[url:value = 'http://222.138.102.135:34775/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb6076a-d9e1-2157-3155-0000dc758ba9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.117.178:50959/i","pattern":"[url:value = 'http://105.224.117.178:50959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d907592d-afb9-9747-c692-000031fee37a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.202.24.36:37993/i","pattern":"[url:value = 'http://27.202.24.36:37993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0018b629-8eff-ae90-5778-00006219a9a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/bin.sh","pattern":"[url:value = 'http://182.116.10.124:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e2e0d-d04d-0004-b130-00007b7aa37d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/i","pattern":"[url:value = 'http://42.224.99.104:58376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7054af-37fb-694f-fff3-0000a880b6d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.41.107:34572/i","pattern":"[url:value = 'http://125.43.41.107:34572/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba95a5e-7e87-fcf2-e765-00007d0ae8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.216.30:39421/i","pattern":"[url:value = 'http://125.47.216.30:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ec352c-7c53-7272-49ab-0000ceac966f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/bin.sh","pattern":"[url:value = 'http://196.189.98.77:39424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc35129-ce2f-2f3e-25f0-00006227c7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/i","pattern":"[url:value = 'http://27.159.154.179:49141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49843208-56c7-8b7e-eaa9-0000fdc00717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.0:36944/i","pattern":"[url:value = 'http://110.36.86.0:36944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aca68e2-e93e-fe64-3315-000088858b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.201.196:57604/i","pattern":"[url:value = 'http://110.38.201.196:57604/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b6d28d-786c-2a97-98c0-00008c977cd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/i","pattern":"[url:value = 'http://61.137.193.167:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bae7dc0-8d4a-40b8-e2e9-0000ce265a21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/bin.sh","pattern":"[url:value = 'http://83.228.109.209:51502/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e720ba54-5bd2-c9d7-d9a6-0000ba87a5df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/bin.sh","pattern":"[url:value = 'http://78.60.75.209:50077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c688e0-3f90-fb26-e8a3-0000dcc9e019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/i","pattern":"[url:value = 'http://83.228.109.209:51502/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944454b3-15b4-9661-5741-00009c0818aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/i","pattern":"[url:value = 'http://78.60.75.209:50077/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c90e84b-9f20-945e-f7e9-0000ee11cd23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.152.192:37513/i","pattern":"[url:value = 'http://61.53.152.192:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992d34a7-de11-1a12-bf4e-0000d6b4a150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/i","pattern":"[url:value = 'http://42.233.91.100:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5beb32-4a0d-1bc8-8a49-000092aad6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/bin.sh","pattern":"[url:value = 'http://42.233.104.208:40542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef4c9c8-cab1-b318-993e-0000cb22d81a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.83.85:60110/i","pattern":"[url:value = 'http://42.237.83.85:60110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e2fde8-2f29-b6d2-73a3-0000bc91d8e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.233.154:43712/i","pattern":"[url:value = 'http://60.23.233.154:43712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--980a0c38-2789-ff59-bd6c-0000926e570c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.29:40746/i","pattern":"[url:value = 'http://59.58.42.29:40746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb35e500-19e2-0433-7fa1-000081cc86df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.114.165:55640/i","pattern":"[url:value = 'http://61.52.114.165:55640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf05026-9a20-198e-37fe-0000cfb0d069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.202.82.19:60523/i","pattern":"[url:value = 'http://87.202.82.19:60523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522aacb3-cf05-718b-eda1-0000ea673f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/bin.sh","pattern":"[url:value = 'http://42.57.201.222:50295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702ffbd0-c82e-4087-e293-0000256675c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/i","pattern":"[url:value = 'http://42.57.201.222:50295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--593e637b-f8c3-4685-515d-00002363e789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/i","pattern":"[url:value = 'http://42.59.226.215:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748b9dd3-f645-f51b-0934-0000c53c604c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/bin.sh","pattern":"[url:value = 'http://42.59.226.215:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab009f55-ba54-33d8-63d2-000068d83f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/i","pattern":"[url:value = 'http://123.11.11.28:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35047732-c6b7-7b8a-8e72-0000b48a5f4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/bin.sh","pattern":"[url:value = 'http://61.53.72.56:41711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bec07e-2c0b-f218-b769-00004d3a4949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/bin.sh","pattern":"[url:value = 'http://42.231.67.26:56479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02202e01-6bdc-ca2f-13a8-0000c5dd067f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://82.114.181.233:33360/i","pattern":"[url:value = 'http://82.114.181.233:33360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d72b2c8-ada0-b51d-31b5-000003325ee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/i","pattern":"[url:value = 'http://42.58.118.214:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e14e18d-0545-df2d-d0b5-00004024dbe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/bin.sh","pattern":"[url:value = 'http://42.235.43.180:36905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f5b951-819f-0de3-c1bb-000061d81272","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/i","pattern":"[url:value = 'http://42.235.43.180:36905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433827fe-e63d-a890-eb50-0000b9eb11cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/i","pattern":"[url:value = 'http://42.233.104.208:40542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcef2f7-1e54-eba2-cdf1-00001eab4cc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/bin.sh","pattern":"[url:value = 'http://42.233.91.100:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--127a2389-d60a-2c89-77c5-000014eb8af0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.162.218.63:58599/bin.sh","pattern":"[url:value = 'http://60.162.218.63:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9b0f17-4c46-fbaa-4e9c-00000d5aa6d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/i","pattern":"[url:value = 'http://61.53.72.56:41711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2efde2f-ddc7-3066-cbc7-0000e86953f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.168.22:33430/i","pattern":"[url:value = 'http://42.238.168.22:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b524d0a8-2b18-84c2-8052-00009e26680d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/i","pattern":"[url:value = 'http://117.211.213.219:35115/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5663e368-0979-33f6-453c-0000135a4fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/bin.sh","pattern":"[url:value = 'http://117.211.213.219:35115/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f855e7aa-f62b-c9e4-560b-00002aa75db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.101.221:42822/i","pattern":"[url:value = 'http://27.37.101.221:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5906984f-6df0-d65e-0bf0-0000df4b2a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.225.130:45357/i","pattern":"[url:value = 'http://221.1.225.130:45357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3257bf6-6701-987a-4237-0000c2f03e45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.226.6.169:40695/i","pattern":"[url:value = 'http://105.226.6.169:40695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbd06d0-563a-ad52-0c79-00009a7518e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/bin.sh","pattern":"[url:value = 'http://175.165.110.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c240de9c-97af-6bf0-05ff-00006918adf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/i","pattern":"[url:value = 'http://175.165.110.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33cf168f-6c54-665c-e1a7-0000095c73d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aktcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aktcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61376b3e-a40f-1cad-d104-0000e4379a36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/UDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/UDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e95818b-7572-b513-56a6-0000bbeb7f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EEcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EEcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f51c5d1-b165-5a26-8652-0000d2dc58ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uzcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uzcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce6e81f-f59d-22c4-5167-00003cc29fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a047008-9eeb-ecc3-2509-0000d237a9c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd08581-350c-58a7-63b9-0000d4a68a8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b29c10-ab54-f83e-6186-000010cbf10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/syst3md","pattern":"[url:value = 'http://ten.devurek.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d7c219-ff65-c7da-339c-000006fa2f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cli","pattern":"[url:value = 'http://ten.devurek.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b5ecad-d27d-61f8-be3b-00006c1670f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/proot","pattern":"[url:value = 'http://ten.devurek.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b62e5f2-e10f-3650-fd42-0000c283e5d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401efbe0-19ff-46f1-66ca-000050d3905b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/log","pattern":"[url:value = 'http://ten.devurek.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c58d8426-1aec-d754-761e-00000450ddeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0351d79f-0d97-3b4b-1617-0000d02c88da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/oldboss","pattern":"[url:value = 'http://ten.devurek.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753593ee-aaaf-4845-f256-00005bd5a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/boss","pattern":"[url:value = 'http://ten.devurek.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42eee5be-02ee-6817-f42a-00005f0d5e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f696aaf1-a7b0-adc2-329a-00000df43ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cliaarch","pattern":"[url:value = 'http://ten.devurek.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8f0c5e-8200-5170-a505-000043e697e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e338b0-28d0-bc3d-cb27-00001fb4b473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/main","pattern":"[url:value = 'http://ten.devurek.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce59a700-6e6b-8330-7779-00000787861e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b80426-54a4-cb02-791f-000069608187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/wd1337","pattern":"[url:value = 'http://ten.devurek.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7228ea-cf59-2d87-6d9c-0000b355aed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d81ae7d-c66b-0a25-a2a2-000002649c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3411a87-7805-b674-f0fb-0000a1fac3d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/Error84","pattern":"[url:value = 'http://ten.devurek.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8819bc78-8860-cfb3-b0ad-0000828f35ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f3dd78-72ef-92b7-4f0c-0000beb66431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mnurlogistics.az/ind8inc/crypted.ps1","pattern":"[url:value = 'https://mnurlogistics.az/ind8inc/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1170746b-bff7-8047-b02b-0000aba2acb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/#","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/#']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35bb3375-cfbf-9c8f-89a9-00000e94e014","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://malaysianpastrybakery.org/crypted1.ps1","pattern":"[url:value = 'https://malaysianpastrybakery.org/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a07d28-6ff5-2896-2f7f-00008e6ff641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/oldboss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1759ec-6a36-785e-2f8e-0000bc240f3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/boss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb79bed-3357-c28f-b302-000092fc7388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.57.200:55698/i","pattern":"[url:value = 'http://123.8.57.200:55698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3747d74-fbd4-a531-227c-00006a77371f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64675331-f716-028b-1098-0000939f3001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin44.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbf1be-bcdf-c579-e6fe-00006aa22cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/TELEG.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/TELEG.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e4b240-e7cc-d9ae-c271-0000f57822cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/Forbes.exe","pattern":"[url:value = 'https://rcf.co.mz/Forbes.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d04367a-eba0-b8af-de88-00002361fd19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbbea79-1b53-c0a4-825f-0000577467cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/am11binupload.txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/am11binupload.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824336a7-b8a4-9848-ba77-00004e888f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/syst3md","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc1f2b2-6371-7924-a1df-0000f8451ec4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/main","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc2af85-64c3-0204-651e-00004f7d9f63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cli","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b0b030-5e6a-0a89-bd91-0000ffb9bd4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/Error84","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070d561a-c73d-2969-e993-00007797e560","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96322f72-d4a0-ae05-4e71-000079c890eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6742af4b-1533-f1b9-91ef-000039f4a772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/proot","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0b967c-b111-5809-6fc9-000019542055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/log","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45cd1ef1-56ad-8ca0-c36b-000071e4ddde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883fb428-3976-f062-a22d-0000f4e714ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/wd1337","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2552e219-1d1d-ca63-dff7-00000eac7cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/google.exe","pattern":"[url:value = 'https://rcf.co.mz/google.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edcb75f-5e8b-ba4b-41d2-0000b7778afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/img_065018.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/img_065018.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79e3efa-b7f0-a32b-773c-00001a571661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c421e16c-22a4-b4e7-b5e3-0000beb7a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f26619-1338-96ec-858b-000087958288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://medicosantiagomarrero.com/services/img.png","pattern":"[url:value = 'https://medicosantiagomarrero.com/services/img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f886112c-a96a-2928-eef4-00009223ffd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.79/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe8dd62-592b-b03c-1c03-000025628b23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/flyudfg.png","pattern":"[url:value = 'http://192.109.139.79/flyudfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c7535a-484c-8ac2-fe0f-000001cbb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.9.35.137:54934/i","pattern":"[url:value = 'http://95.9.35.137:54934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9efbe3-00a9-bc48-1827-0000bf2dade9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/3xmytp.sh","pattern":"[url:value = 'http://31.76.29.161/3xmytp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f453511-7d06-8301-bacf-00004d15fb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/bin.sh","pattern":"[url:value = 'http://203.2.151.15:43360/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec627c6d-40d1-3eb4-2541-0000944f2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/i","pattern":"[url:value = 'http://203.2.151.15:43360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7e7d7b-3a59-72c2-a8a2-000081fe99d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png","pattern":"[url:value = 'https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dafa7d1-85c8-ae4c-cbdf-0000df128ec3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58039e4-ee34-6fa1-ef1d-0000b9a133bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83da76a2-07a7-9e67-4cfb-000031e92999","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--654f7448-1b6f-e8e9-c5d6-000027cf7940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.x86","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c89685e-54b6-f73c-59c1-0000ab149c53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff64274-be70-14c2-ecd3-0000311fff43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48fd4586-81e1-f5bf-1182-00005fcc1735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b8e58c8-0f9f-e7bb-2651-000013a8fb36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82870972-9d87-2af6-c243-0000011d54d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2484bd-d873-74b6-69cf-00005a1c9109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccd9887-6944-9339-367a-00004c41f6f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.189.81:42693/i","pattern":"[url:value = 'http://123.14.189.81:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb4e995-bcb3-4ddd-2e0d-00004c1e000e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.stratagemzw.com/MSI_PRO.png","pattern":"[url:value = 'https://www.stratagemzw.com/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d434940-dc02-f693-41cc-00004a822c05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014220.png","pattern":"[url:value = 'https://stratagemzw.com/img_014220.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096254c2-6b6b-f6e6-be4f-00001b369fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff414429-d2f7-7abe-b9b1-00005624c339","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://dasberlinerhotel.com/wp-content/uploads/update.exe","pattern":"[url:value = 'https://dasberlinerhotel.com/wp-content/uploads/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--892285fa-9aea-13f0-60b0-0000dfb19ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014740.png","pattern":"[url:value = 'https://stratagemzw.com/img_014740.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e526f20d-cc16-01b6-5a40-00000829d0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/40/JSload.hta","pattern":"[url:value = 'http://209.54.103.153/40/JSload.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a013820-bd90-af1e-5c3c-0000aca38f79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js","pattern":"[url:value = 'http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c500a6f1-2030-ed36-2c0d-0000b82d47e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7acf5e-69ea-4de7-73c0-00006ee615ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/bin.sh","pattern":"[url:value = 'http://138.204.196.136:51078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909403ff-17e7-4b04-40c8-000096a1754d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93552bb0-b272-3532-c5be-00005c59e33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78487ea4-96c2-dca4-f2e8-0000e3bc2db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.x86_64","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--affc214d-ffcf-5803-a832-0000b4a0f046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mips","pattern":"[url:value = 'http://2.26.48.37/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7968af85-1606-c93e-8ad4-0000797ed5f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i686","pattern":"[url:value = 'http://2.26.48.37/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d0159b-37ea-bd98-f1f0-0000b456269c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.m68k","pattern":"[url:value = 'http://2.26.48.37/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04645390-11bc-28d5-f479-0000d22c568c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.powerpc","pattern":"[url:value = 'http://2.26.48.37/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87424b4e-a5b2-a316-daaa-0000052d5391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.sh4","pattern":"[url:value = 'http://2.26.48.37/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a185891-7840-3b35-9384-000069a9d809","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv5l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--730369d0-9ae2-c7e7-3842-000054c9f1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv4l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41350b52-24b1-2dda-0acc-00002e09a2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv6l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2e11dc-bbf3-dc2b-cfb0-0000ffeaa75e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i586","pattern":"[url:value = 'http://2.26.48.37/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582e3a13-bea1-3587-7604-000013698b69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv7l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e92e84-7310-a9f9-d263-0000c09ba516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mipsel","pattern":"[url:value = 'http://2.26.48.37/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4ebb05-8237-fd02-9e07-000064e89c0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7d6303-4acb-d185-b14a-00009654ce7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.138.135:48639/i","pattern":"[url:value = 'http://115.203.138.135:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06e754a-86a6-9984-2304-000071398ca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27eb7b2-d1b3-4b94-5466-00002e950b26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99412f8d-0707-3ddd-4ed0-00000e5c848f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta","pattern":"[url:value = 'https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--565af734-ebca-ab39-0196-00000757c724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98aa1923-84a2-16a6-1caf-0000637e5e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156d4097-09ba-7f4d-a3ef-0000cf50b92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suppliers.lovestoblog.com/img_005219.png","pattern":"[url:value = 'https://suppliers.lovestoblog.com/img_005219.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45688246-b64c-ebc0-ddd2-0000cabda73a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://totalfitting.com.au/super%20agent.exe","pattern":"[url:value = 'https://totalfitting.com.au/super%20agent.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dac6eae-ecb7-379b-e890-0000038e9c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://midle-eastcompany.com/HypEEAugustBless2026.exe","pattern":"[url:value = 'https://midle-eastcompany.com/HypEEAugustBless2026.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46c383b-00f9-b020-fc8c-00008fd3deb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://aeplled.cfd/stego/stego_7mpp3kpd10.png","pattern":"[url:value = 'https://aeplled.cfd/stego/stego_7mpp3kpd10.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d14ca21-f6b5-e101-f517-0000e636829d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/praise/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/praise/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b04b7d-3412-3062-75c4-000070b39b0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:58578/i","pattern":"[url:value = 'http://110.38.210.180:58578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704130ae-8b2d-5c1a-52aa-0000f90d7241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5917492177/O0KqSEz.exe","pattern":"[url:value = 'http://62.60.226.140/files/5917492177/O0KqSEz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66b656c-a341-f823-e275-00007751501e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/bin.sh","pattern":"[url:value = 'http://112.248.186.110:34455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d08f45-fbfd-949d-ce95-0000b8ef5c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/i","pattern":"[url:value = 'http://112.248.186.110:34455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351e9264-df18-7fd6-3665-000002d0f39c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de1b8b91-a1ee-a570-08ba-00005ab51fdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b9e45-e309-787b-21b6-0000e780646f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b2c65b-48df-a321-f94a-00002c5026e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b511f344-f17c-a9df-c505-0000d6c4f28b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f911e690-e5e4-92b5-546a-00006bf1893f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7cb0d7-af66-fc32-80c6-0000c1c6f50f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77ca503-5719-1b37-fb99-00007cf38ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5f2d02-60c9-3283-9482-00002c0c8775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db2d38f-dd04-530a-e2d5-000091655d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e9adf7-8d93-6197-a24f-00008682b863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c76ddd6-363c-501a-601a-0000f08263eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace9b823-081b-a84d-673f-00003bb7c3d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e99ee2-85fe-2f96-7966-00006804bcb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/bin/support.client.exe","pattern":"[url:value = 'https://45.83.31.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e58a57-61c2-e04c-724d-00008c891b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e93ff5-c884-8645-e40c-0000c6718412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/bin/support.client.exe","pattern":"[url:value = 'https://124.198.131.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f93c16-7567-6b41-d32f-00005b4fa90b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f2755f-b4cd-72ec-1038-0000926d3203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://209.141.51.224/dns","pattern":"[url:value = 'http://209.141.51.224/dns']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae50968-d98c-0319-f58c-0000b31072c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.53.139/linpeas.sh","pattern":"[url:value = 'http://209.141.53.139/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52b9a33-3e13-ec2e-809c-0000f5498562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.76.206.4/123","pattern":"[url:value = 'http://38.76.206.4/123']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8653581-53a9-e1c4-5928-00008b6863b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/lterouter","pattern":"[url:value = 'http://160.119.71.134/n2/lterouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513b11dd-99fa-9dda-8f88-000093f529a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mpsl","pattern":"[url:value = 'http://160.119.71.134/n2/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e9d714-614d-aca1-45a6-0000f8f647e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mips","pattern":"[url:value = 'http://160.119.71.134/n2/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977d839a-9bf4-d096-c077-00003ae8be16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/g","pattern":"[url:value = 'http://144.31.147.198/g']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dabb9d6-b514-5e50-266d-0000097163a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tr","pattern":"[url:value = 'http://144.31.147.198/tr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c4f2d2-f8ad-b443-c941-0000c0f82102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/u","pattern":"[url:value = 'http://144.31.147.198/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a571e2-24ba-d95d-4090-0000ce885ed8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/mp","pattern":"[url:value = 'http://144.31.147.198/mp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a86a84-a990-597f-1905-000055555e72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/m","pattern":"[url:value = 'http://144.31.147.198/m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b43c8d2-8675-dde1-e64d-0000968de997","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/gs","pattern":"[url:value = 'http://144.31.147.198/gs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a5d8fa-32de-331f-8010-0000a378ab2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tp","pattern":"[url:value = 'http://144.31.147.198/tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ccff27-f72d-cc96-859f-0000c88266cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/j","pattern":"[url:value = 'http://144.31.147.198/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c5ae9d-3d2b-2267-8b65-0000da37c925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/i","pattern":"[url:value = 'http://144.31.147.198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da757e7-d215-606b-15c3-0000e5937ede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/s","pattern":"[url:value = 'http://144.31.147.198/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae065d-15af-d59e-ed90-0000f726d130","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/p","pattern":"[url:value = 'http://144.31.147.198/p']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17211ce7-cab3-876c-c0e8-0000f2c5ce9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://144.31.167.1/bin/support.client.exe","pattern":"[url:value = 'https://144.31.167.1/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e332b73c-baa5-4ac4-5633-0000ba543046","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/ppc","pattern":"[url:value = 'http://160.119.71.134/n2/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab92b35-c954-2e04-95b7-0000121b947e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sparc","pattern":"[url:value = 'http://160.119.71.134/n2/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c5e3c2-6ecf-14d6-d75d-0000f8009138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/m68k","pattern":"[url:value = 'http://160.119.71.134/n2/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6789c032-3e89-b964-a111-00008c0798fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv7l","pattern":"[url:value = 'http://160.119.71.134/n2/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e92f173-fa6e-f476-a35c-0000b167b14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv6l","pattern":"[url:value = 'http://160.119.71.134/n2/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55bfa2b0-68d6-fb60-bdf8-0000f6c7cb9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv5l","pattern":"[url:value = 'http://160.119.71.134/n2/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca493f1-b9af-ae8a-3fc6-0000cba7e22d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv4l","pattern":"[url:value = 'http://160.119.71.134/n2/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8086f2-c83d-9046-85c3-0000c2575e33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86","pattern":"[url:value = 'http://160.119.71.134/n2/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9660556b-45c1-993f-22ae-00003a8aa9b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sh4","pattern":"[url:value = 'http://160.119.71.134/n2/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c87c8e0-cb77-d5b4-b6c6-00002d6bded7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/aarch64","pattern":"[url:value = 'http://160.119.71.134/n2/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0628cec2-63f0-a8ab-01ed-0000069155bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86_64","pattern":"[url:value = 'http://160.119.71.134/n2/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336f110f-d55c-e337-603c-000071fe5d79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.138.178:42032/i","pattern":"[url:value = 'http://112.198.138.178:42032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9214e701-001c-c189-5fe5-0000fe519e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/tbk","pattern":"[url:value = 'http://160.119.71.134/n2/tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ad9f5f-dec8-2e95-6a13-0000cd2865d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/bin.sh","pattern":"[url:value = 'http://196.189.197.131:44348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197733b-b6a3-e291-a251-0000b63163ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/i","pattern":"[url:value = 'http://196.189.197.131:44348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9701fe3e-ddc8-bf26-0e64-000027bb7106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172-104-49-49.ip.linodeusercontent.com/bot.mips","pattern":"[url:value = 'http://172-104-49-49.ip.linodeusercontent.com/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11da1c4-ad1b-218a-76ca-0000b6ca9ae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mips","pattern":"[url:value = 'http://172.104.49.49/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54016f-451d-4599-b60e-0000c2e06d12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mpsl","pattern":"[url:value = 'http://154.90.70.23/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd4af046-88c3-e6d7-9358-000002d4fd52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.sh4","pattern":"[url:value = 'http://172.104.49.49/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8181211-5da1-3e8f-87d9-0000820a64a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.ppc","pattern":"[url:value = 'http://172.104.49.49/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--007294d3-693c-8ebe-2ecc-0000d09f91c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm","pattern":"[url:value = 'http://172.104.49.49/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bb15e0-90ae-e50b-15a5-00003692194c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.aarch64","pattern":"[url:value = 'http://172.104.49.49/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7565bb78-7658-7a89-c6cc-0000947d9e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm7","pattern":"[url:value = 'http://172.104.49.49/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13108047-cb34-d827-150d-0000a79756d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mipsel","pattern":"[url:value = 'http://172.104.49.49/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e769a20-c917-bb21-0dc0-0000fef3b5e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.x86_64","pattern":"[url:value = 'http://172.104.49.49/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc513908-20cf-5a23-0f9a-0000e88df872","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tarkioweb.com/crypted.exe","pattern":"[url:value = 'https://tarkioweb.com/crypted.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fd00ac-700b-2a36-59f5-0000e7186f1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/i","pattern":"[url:value = 'http://27.207.229.26:38938/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f5b246-9109-ebbb-3e9c-00009b457e75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/i","pattern":"[url:value = 'http://182.127.69.34:57222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0efd658-932b-c7e0-6695-0000710ea716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/i","pattern":"[url:value = 'http://39.73.172.141:48914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ac7794-f2b2-e5f6-697e-0000b17255e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:46269/bin.sh","pattern":"[url:value = 'http://196.189.130.28:46269/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88005e5e-3dfb-ebb7-003b-0000b66c3646","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/bin.sh","pattern":"[url:value = 'http://117.223.141.118:49088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ba8022-5883-73b9-6459-0000df881569","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mips","pattern":"[url:value = 'http://150.241.65.212:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8866d3-4193-40a4-d1de-0000ab7d09a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x64","pattern":"[url:value = 'http://150.241.65.212:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6192b93-863f-db53-bcc9-000019381678","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/dp.sh","pattern":"[url:value = 'http://150.241.65.212:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcbcb24-ed3a-3e6d-33b0-0000ef8abef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm4","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e1039c-5b55-9d82-0a05-0000fc5f8564","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc440","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3466c83-a2bc-7eaf-02a0-000041f220aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i686","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fed69d-c8ae-6f2e-2ad1-00008cdad3c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.m68k","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40deb026-20d3-9eab-90f6-00004d182ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mipsel","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69ff077-1676-81c6-a153-0000d1c454c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118c5c65-518a-5664-b379-0000486a9127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sparc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3cd1220-50e0-6764-5681-0000511acd33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sh4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6adc861-30da-c59c-81f9-00001627660c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm6","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a3a94d-f18f-46ab-4927-0000bc2eae87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6462466e-fc10-1790-66a2-0000b3a04b17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc440","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c2b8ed-2240-0773-9053-00000c3a81a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i486","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa499db-5820-da6d-6586-00000492c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm5","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1aaf8f7-f125-850a-502a-0000ae9b0169","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm7","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba08d1b-05dc-b588-f3a1-0000bcfe4c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x64","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575df5d4-12b8-a074-ff67-000002e7e0a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mipsel","pattern":"[url:value = 'http://150.241.65.212:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc96b4f4-6096-97da-cc40-0000df7ec3b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.m68k","pattern":"[url:value = 'http://150.241.65.212:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c5aa08-5029-fa58-49d0-000045837679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm6","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2577edfb-9fae-c4fc-c7eb-00006856b084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sparc","pattern":"[url:value = 'http://150.241.65.212:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b71bbf-f10e-1f81-1fa7-0000c6471137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c052a71-814c-01d2-2b62-0000be447f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x86","pattern":"[url:value = 'http://150.241.65.212:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45aada84-1105-7bef-ee57-00005f9e91d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i486","pattern":"[url:value = 'http://150.241.65.212:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaccfbb2-45be-6651-cb47-00005736d997","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm5","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462e0eea-4588-bc92-2e36-0000125630df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i686","pattern":"[url:value = 'http://150.241.65.212:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2dc1b9-c3fe-561c-a343-0000a9c73ab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x86","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5f9e8-98bc-802b-abb0-0000469988c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sh4","pattern":"[url:value = 'http://150.241.65.212:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c29a9e-3664-150e-eb33-0000fd3f111c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm7","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d2e24b-df3b-63c5-2636-00008c2c051c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mips","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8c5a18-f3ff-0c53-fd34-00004219cd9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/bin.sh","pattern":"[url:value = 'http://125.43.228.137:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a50558c-f730-86a0-7f78-0000b0fe5fa5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/i","pattern":"[url:value = 'http://117.223.141.118:49088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa4172e9-faa0-066c-4a7b-00004e97c459","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.231.237:58779/bin.sh","pattern":"[url:value = 'http://42.225.231.237:58779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62cdaeb-8966-b661-1b76-000018ce3b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/i","pattern":"[url:value = 'http://125.43.228.137:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb28ea-e08b-bfba-04ca-00002731954e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/bin.sh","pattern":"[url:value = 'http://103.172.186.158:49566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f62e1c-77ab-02b9-5598-0000be934198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/bin.sh","pattern":"[url:value = 'http://115.51.111.87:51413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6482efe-9740-d173-7152-0000382cdb0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.152:59339/bin.sh","pattern":"[url:value = 'http://59.96.140.152:59339/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e925d819-0e58-373b-6c85-0000e56446e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/i","pattern":"[url:value = 'http://182.116.113.190:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5d9fdf-8e28-b0af-30b7-000091a08ca4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/i","pattern":"[url:value = 'http://218.0.112.226:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3426db-f5f6-5e8f-44cf-000097c0e8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/i","pattern":"[url:value = 'http://116.76.206.254:50342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b347fbbc-679d-5308-951f-000027c2ae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/i","pattern":"[url:value = 'http://103.172.186.158:49566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5897b608-50bf-cacb-072b-000026911b97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/bin.sh","pattern":"[url:value = 'http://175.165.6.177:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1afd238e-1d86-e48e-69f1-000062788afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/i","pattern":"[url:value = 'http://115.51.111.87:51413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d61598d7-663e-57ee-d462-0000a8f58234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/bin.sh","pattern":"[url:value = 'http://123.12.165.138:33116/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec85a1e-ace9-d260-dbbd-000037253496","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.104.54:56510/bin.sh","pattern":"[url:value = 'http://112.248.104.54:56510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1a46-664c-e272-66d2-000027fbf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/i","pattern":"[url:value = 'http://202.1.26.69:42948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--560da8b7-f6fb-1b96-4d0b-00002c08e731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/i","pattern":"[url:value = 'http://175.165.6.177:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3a0b24-61f5-a068-345b-0000eecaab15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/i","pattern":"[url:value = 'http://123.12.165.138:33116/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57024aa2-a812-5959-186e-0000ca120a54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.232.182:58614/bin.sh","pattern":"[url:value = 'http://182.119.232.182:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9109e95-bafe-5cf2-0ac3-0000fddb88ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.136.25:46193/i","pattern":"[url:value = 'http://39.79.136.25:46193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86505e2a-4495-3c2b-4231-00008effa730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.40.8:41660/i","pattern":"[url:value = 'http://61.54.40.8:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec1cd2f-6aa8-dae1-192b-000055501fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/bin.sh","pattern":"[url:value = 'http://218.0.112.226:51471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bc924c-c446-c773-c29f-00000c56269c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/bin.sh","pattern":"[url:value = 'http://182.116.113.190:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f682c7f-1060-7bee-d2b7-0000d183e838","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/bin.sh","pattern":"[url:value = 'http://110.186.231.112:53078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4308f7-4643-f75f-c23a-000063f1ba37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.199.15:38549/i","pattern":"[url:value = 'http://182.119.199.15:38549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98db0edd-86a7-9f2b-7c72-0000fea5c587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/i","pattern":"[url:value = 'http://110.186.231.112:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d03c045-2a7b-fa8f-033e-0000d0d48c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.101.70:58354/i","pattern":"[url:value = 'http://115.51.101.70:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48b3562-676f-d6ba-301c-0000677ec24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/bin.sh","pattern":"[url:value = 'http://123.5.191.195:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86a09f8-a53c-39c7-29cc-000033045471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/bin.sh","pattern":"[url:value = 'http://175.174.107.238:46076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830d9573-8cd6-0462-c565-0000d04691c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/bin.sh","pattern":"[url:value = 'http://105.184.167.215:38779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2158ab-4ccc-b97a-a1d6-00001f5030a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.30:39103/i","pattern":"[url:value = 'http://182.118.241.30:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66069ec-fab1-f796-ca68-0000ad03dd1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/bin.sh","pattern":"[url:value = 'http://196.188.75.58:48074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a1de20-df9f-37e9-4080-000072517805","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/i","pattern":"[url:value = 'http://105.184.167.215:38779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01c58c85-1ff4-6e37-3981-00006fb07dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/i","pattern":"[url:value = 'http://196.188.75.58:48074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3e42b7-9ce5-f4ea-eccd-000037499d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/i","pattern":"[url:value = 'http://123.5.191.195:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17f1d4-e42b-f2b9-93ba-0000f0828d83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/i","pattern":"[url:value = 'http://123.11.64.213:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcaeeae2-17ef-a620-919a-0000cbefd455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.239:54755/i","pattern":"[url:value = 'http://175.148.156.239:54755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6d24c-86bd-eca4-93c6-00006a26c1e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/bin.sh","pattern":"[url:value = 'http://221.1.247.58:51510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aabfb2b-f0b9-e8ee-52c5-00007622aef3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/bin.sh","pattern":"[url:value = 'http://105.154.98.198:48439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473f7804-d6b6-585d-b1f8-0000a2ff33f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/bin.sh","pattern":"[url:value = 'http://113.231.100.15:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7eb96d-e3d2-f8d6-5559-000036c3546b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/i","pattern":"[url:value = 'http://105.154.98.198:48439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2b1766-2bf9-0a91-4b5e-000011138f60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv5l","pattern":"[url:value = 'http://31.76.20.19/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bddde71-4e62-0bca-74c0-0000469c010a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/ppc64","pattern":"[url:value = 'http://31.76.20.19/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4da6173-0bfc-cf86-9b14-0000b821f27f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mipsel","pattern":"[url:value = 'http://31.76.20.19/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d092696f-ef81-75f8-7e6c-00001dc3ebe5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/x86","pattern":"[url:value = 'http://31.76.20.19/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdda4ca-2113-5208-d506-00005a478100","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/i686","pattern":"[url:value = 'http://31.76.20.19/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81d75e4-18fb-0c77-2037-00006bd3dc00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv7l","pattern":"[url:value = 'http://31.76.20.19/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a492a02-151d-c12b-91f5-00009799a4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mips","pattern":"[url:value = 'http://31.76.20.19/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10644a5-9920-b225-ee55-000056b3f5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv6l","pattern":"[url:value = 'http://31.76.20.19/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb7692d-8b0a-adbd-ae27-000025d96673","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/bin.sh","pattern":"[url:value = 'http://123.13.32.25:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba5f9c-2201-6055-92e3-000016e81f18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/i","pattern":"[url:value = 'http://123.13.32.25:51859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60465e3a-5565-b678-c4da-0000660db1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/i","pattern":"[url:value = 'http://113.231.100.15:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06a71cea-2b03-1c21-3ed2-0000fec67bc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9df1c0-016d-9801-c671-0000e6c0ecf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/run.sh","pattern":"[url:value = 'http://2.26.81.123/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792044b7-504c-cf44-d21a-00009b1c078b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm","pattern":"[url:value = 'http://2.26.81.46/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b30c7c2c-983d-ef3f-5ccb-00004f1d8048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/spc","pattern":"[url:value = 'http://2.26.81.46/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2fd89d-892d-19f6-10c7-0000e38d1c7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/i686","pattern":"[url:value = 'http://2.26.81.46/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98910620-1950-4da9-12de-00001d690782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.m68k","pattern":"[url:value = 'http://2.26.81.46/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf8f3bb-798e-7bd9-c962-0000b18a9c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86","pattern":"[url:value = 'http://2.26.81.46/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14ac275-36dc-0265-1bfb-0000c989f2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/ppc","pattern":"[url:value = 'http://2.26.81.46/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cd2dc5-d3e3-280b-7da2-0000a6edf536","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm5","pattern":"[url:value = 'http://2.26.81.46/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0229bc3e-3d52-6b68-e022-0000d041f4ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.i686","pattern":"[url:value = 'http://2.26.81.46/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4182022-c306-fffa-22e2-000049576b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/sh4","pattern":"[url:value = 'http://2.26.81.46/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f50c62-a128-b81c-d8f0-0000de47130a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86_64","pattern":"[url:value = 'http://2.26.81.46/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976283-2e22-16c2-c8ba-00002ea5ef12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/m68k","pattern":"[url:value = 'http://2.26.81.46/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5fc7d13-3aa1-c7ff-ced0-0000c48ce1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/dbg","pattern":"[url:value = 'http://2.26.81.46/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4bd32f6-7adc-0eb2-98e6-00001d9fd158","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.mips","pattern":"[url:value = 'http://2.26.81.46/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e69909c-1887-60f8-30ea-000045505782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mpsl","pattern":"[url:value = 'http://2.26.81.46/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777a5e84-4e59-9554-dba1-000086a21e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.sh4","pattern":"[url:value = 'http://2.26.81.46/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbb5655-af5b-1a52-7548-00002e5339c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mips","pattern":"[url:value = 'http://2.26.81.46/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc34ce9-611b-86ab-900a-00000ce43dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm7","pattern":"[url:value = 'http://2.26.81.46/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba00790f-0825-d3ad-b40b-000001d7c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.x86_64","pattern":"[url:value = 'http://2.26.81.46/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ffa243-b84f-9492-e547-000037994724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_amd64","pattern":"[url:value = 'http://144.31.30.228/linux_amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bd6afb-2087-23fd-9ed7-000067259523","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm5","pattern":"[url:value = 'http://144.31.30.228/linux_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c87f6a-5030-89b6-f92f-00008c2e24e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips64","pattern":"[url:value = 'http://144.31.30.228/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9acb116b-d230-c580-6c2c-0000ef9b59dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips","pattern":"[url:value = 'http://144.31.30.228/linux_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f254de05-1342-182f-5088-00008100facb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm64","pattern":"[url:value = 'http://144.31.30.228/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eb30bd7-5f2d-7993-12b9-0000cd2c5da8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm7","pattern":"[url:value = 'http://144.31.30.228/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e65b7ad-778a-0991-82cd-0000b38a266b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/svchost.exe","pattern":"[url:value = 'http://217.60.241.248/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcfcf50-fb0c-3177-f30a-0000df737f81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.247/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b7b5df-8018-9c8c-91cc-0000be144bb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81610c63-76c1-bf2a-1634-000028e72e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.70.215:55426/i","pattern":"[url:value = 'http://182.119.70.215:55426/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb981b8-4317-f96d-a8ad-0000af1e480f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/tbk_stage1.sh","pattern":"[url:value = 'http://95.155.151.113/tbk_stage1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1360e400-6026-7509-c468-000083d6120d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa7c8b-a378-ec19-b12a-0000ac9fcd47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.11/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a63733-871c-b598-72fb-00007de9b849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/t","pattern":"[url:value = 'http://95.155.151.113/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5e1e31-3d24-51e1-f297-0000894d8989","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/bin.sh","pattern":"[url:value = 'http://42.239.252.193:40074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123fbb9b-e969-4097-7f17-0000b46748e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_529348465823b047.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_529348465823b047.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cd0235c-19a0-b4f1-5349-0000a9aa3783","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abfeb4f-a086-3ff3-f8f9-000069e40b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/mort.php","pattern":"[url:value = 'http://217.60.36.94/william/mort.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a0e0e4-dd7f-5371-5f7d-0000d2356de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/t.php","pattern":"[url:value = 'http://217.60.36.94/test/t.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8638b0-c749-c0fd-dd48-0000226c21db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/p.txt","pattern":"[url:value = 'http://217.60.36.94/test/p.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fd6dc2-0fdd-80dc-6124-000075029c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/wi.txt","pattern":"[url:value = 'http://217.60.36.94/william/wi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a9773c1-f2b7-4afa-00e3-00000e629501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ee887-97cf-f33f-5b66-0000911c8fcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.36.94/test/test.bef_fri","pattern":"[url:value = 'http://217.60.36.94/test/test.bef_fri']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9023d3-7f7c-37bd-52f5-0000351f2a4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb63fd7-5ee4-ca5c-ed07-0000066c5a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/gg11","pattern":"[url:value = 'http://150.241.65.212:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10649e1-c7f1-bb6e-70c2-0000948eaea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.68.244:54909/Mozi.m","pattern":"[url:value = 'http://36.70.68.244:54909/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9810004c-b888-5e0f-33f9-0000904121f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced1c5b8-4b23-d5e0-9b3e-000078622b81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac2211a-1fe3-8990-f163-00001c32d54d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/bin.sh","pattern":"[url:value = 'http://42.228.104.137:42450/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1cac66-1f8c-3de2-13c6-0000ae9f5de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/i","pattern":"[url:value = 'http://42.228.104.137:42450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2dee7ce-f26b-d406-53a3-00001f1364fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://smmnet.store/Setup.rar","pattern":"[url:value = 'https://smmnet.store/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf5aa84-1990-3d1b-5c15-00008b75a44e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm","pattern":"[url:value = 'http://185.93.89.72/mirai.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f437fe-ce28-090a-7b82-000061fb8d76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/img_155944.png","pattern":"[url:value = 'https://seasquadshipping.com/old/img_155944.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a7f94b-aca5-f60a-20f7-000005754be6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/MSI_PRO.png","pattern":"[url:value = 'https://seasquadshipping.com/old/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ee2ad-fd46-3390-6148-0000c54d6654","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mips","pattern":"[url:value = 'http://185.93.89.72/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1872d67b-9fdc-3f9d-6acd-0000c5bbb08e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.m68k","pattern":"[url:value = 'http://185.93.89.72/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cdce11-54f2-e01a-31d7-0000593ec8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.sh4","pattern":"[url:value = 'http://185.93.89.72/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808cd23c-dd40-bec2-92d9-00008e07314c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.i586","pattern":"[url:value = 'http://185.93.89.72/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e28993d-0773-f857-8a65-00004df3aaaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm5","pattern":"[url:value = 'http://185.93.89.72/mirai.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8026f811-4c26-d941-8f11-0000e7fa6221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm7","pattern":"[url:value = 'http://185.93.89.72/mirai.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86d9921f-0398-f7ea-e76a-00005f74238d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.spc","pattern":"[url:value = 'http://185.93.89.72/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659cafa7-ef14-35c3-0a6c-0000f8677167","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.x86_64","pattern":"[url:value = 'http://185.93.89.72/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4801c0-f5c0-bceb-cd2e-000004c52b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://nodemetrics3379.com/update/exe","pattern":"[url:value = 'http://nodemetrics3379.com/update/exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849f2c46-3266-58da-304c-0000d9e05123","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.ppc","pattern":"[url:value = 'http://185.93.89.72/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d55ac54-252e-25e3-73ab-000086709521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/i","pattern":"[url:value = 'http://42.239.252.193:40074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496fe891-caa7-2903-6cc3-0000430d920d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1d49dd","pattern":"[url:value = 'http://5.182.210.174/1d49dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95320d1b-0138-6f57-d253-0000997c2667","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dcdd69","pattern":"[url:value = 'http://5.182.210.174/dcdd69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9985b25-bd7d-3e18-cc74-00006d6b5e85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61f089","pattern":"[url:value = 'http://5.182.210.174/61f089']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459f964b-9414-4356-c126-0000cf128483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c3106e","pattern":"[url:value = 'http://5.182.210.174/c3106e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba3d8e2-a8ca-b1ef-de4c-0000582efcbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b9ac2","pattern":"[url:value = 'http://5.182.210.174/1b9ac2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30220d74-1881-bdb9-78a6-0000c740babb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e1bf38","pattern":"[url:value = 'http://5.182.210.174/e1bf38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a5ed65-76f8-185e-bfda-0000f7069647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/03ab36","pattern":"[url:value = 'http://5.182.210.174/03ab36']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263f5693-8bcb-7b7d-d589-000051a494ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98953a","pattern":"[url:value = 'http://5.182.210.174/98953a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c02d36d-061f-b841-13fd-0000f062eab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8cf703","pattern":"[url:value = 'http://5.182.210.174/8cf703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1119c68f-3be5-55dc-f140-0000e7d4c10a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c8bc3c","pattern":"[url:value = 'http://5.182.210.174/c8bc3c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c41967b2-5ecd-7d34-b73c-00007c7b3ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61d4b3","pattern":"[url:value = 'http://5.182.210.174/61d4b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3828279f-3a92-a663-c785-0000ed49a0c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/cd5c35","pattern":"[url:value = 'http://5.182.210.174/cd5c35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2779d8ed-6c76-ee3d-7020-0000357480f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/537b66","pattern":"[url:value = 'http://5.182.210.174/537b66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b160a6-67ea-528d-10d0-0000f0188c38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3abc4d","pattern":"[url:value = 'http://5.182.210.174/3abc4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b507f5f7-fd92-f184-f15b-0000b352a015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3cf53c","pattern":"[url:value = 'http://5.182.210.174/3cf53c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65223c09-7ea1-1ccf-d805-00005d34465f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.90.163.37/powerpc","pattern":"[url:value = 'http://45.90.163.37/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccb8860-c958-5446-a1b6-0000434d87b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/51fc22","pattern":"[url:value = 'http://5.182.210.174/51fc22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6faed4-3b71-7ac6-4bc2-0000937f35d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ca6953","pattern":"[url:value = 'http://5.182.210.174/ca6953']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee403b5-2e59-08a4-f90c-0000bba90c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d3a258","pattern":"[url:value = 'http://5.182.210.174/d3a258']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d098b5ac-44ab-042e-a441-00004372a0f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a2daa","pattern":"[url:value = 'http://5.182.210.174/6a2daa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368e0871-091a-9084-4242-0000639c63d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45cbd5","pattern":"[url:value = 'http://5.182.210.174/45cbd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ed7a12-152a-2934-49ff-0000e0bf3d3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e2ee47","pattern":"[url:value = 'http://5.182.210.174/e2ee47']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dec80b6-c353-95ca-681f-0000a79af159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d620","pattern":"[url:value = 'http://5.182.210.174/c5d620']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea90e586-b9c4-2095-8209-0000c2c8b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/171868","pattern":"[url:value = 'http://5.182.210.174/171868']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9512f7ef-5624-4665-ccbe-0000fe8cd494","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aecb15","pattern":"[url:value = 'http://5.182.210.174/aecb15']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126be9a5-1261-f08b-567b-00007e192a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ff1781","pattern":"[url:value = 'http://5.182.210.174/ff1781']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f997ea4e-8dbf-da8c-4a02-00004488f81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3a2ee0","pattern":"[url:value = 'http://5.182.210.174/3a2ee0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac6009e-296d-2754-cfb2-000071fcb7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/174cb4","pattern":"[url:value = 'http://5.182.210.174/174cb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--931039db-3b93-85bf-2734-000066990232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/28d4d8","pattern":"[url:value = 'http://5.182.210.174/28d4d8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd656a1-eb3a-80f2-c3cd-0000af9dff71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/748306","pattern":"[url:value = 'http://5.182.210.174/748306']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b75bf3-27d2-b68a-b536-00004fbe2ad4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00d054","pattern":"[url:value = 'http://5.182.210.174/00d054']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d293b17-118e-cbf1-3706-0000931f8752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fff372","pattern":"[url:value = 'http://5.182.210.174/fff372']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678eb139-1936-c8fc-b0e7-00002812aa08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e44028","pattern":"[url:value = 'http://5.182.210.174/e44028']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee6ff7-c16b-7f27-7b5b-0000e12a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/035755","pattern":"[url:value = 'http://5.182.210.174/035755']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c461fc60-1f94-5dc4-eb76-00003e1d7135","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44066b","pattern":"[url:value = 'http://5.182.210.174/44066b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebcfe3d-0c19-a2e5-26b4-0000902d0097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6d0d44","pattern":"[url:value = 'http://5.182.210.174/6d0d44']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c43d73-709d-0580-a1e3-00005420dd30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7a276a","pattern":"[url:value = 'http://5.182.210.174/7a276a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108b85cf-708d-182d-3df5-0000521ba265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/img/img_081951.png","pattern":"[url:value = 'http://204.77.9.56/img/img_081951.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d11bdc-e2a1-80cd-34ea-00002807a095","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta","pattern":"[url:value = 'http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d9e5488-b239-005b-6f5a-0000d23029f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--959140a4-2d55-289c-e286-00005d765c50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90cb09","pattern":"[url:value = 'http://5.182.210.174/90cb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78581513-f730-dc06-dc2f-0000b813672d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/828087","pattern":"[url:value = 'http://5.182.210.174/828087']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f782d83-f299-cf3c-ad5d-000069f143b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bf1cf","pattern":"[url:value = 'http://5.182.210.174/8bf1cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f64c3-cde8-7a0a-2c17-0000d068ee12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70d8b3","pattern":"[url:value = 'http://5.182.210.174/70d8b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b743b674-8345-92ff-87e7-0000fac49c81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/657b82","pattern":"[url:value = 'http://5.182.210.174/657b82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94f722fa-e95e-b5e5-c546-0000c84e92a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/60f898","pattern":"[url:value = 'http://5.182.210.174/60f898']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d2dc1d-53d6-4ef6-f3a3-0000a5d84c76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c99e43","pattern":"[url:value = 'http://5.182.210.174/c99e43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2af8f1-ed89-3575-d9c9-000047aefea0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/671030","pattern":"[url:value = 'http://5.182.210.174/671030']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60c38-a5e3-b0a6-91a1-000050b9a812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/eb77a9","pattern":"[url:value = 'http://5.182.210.174/eb77a9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a26a6c7-83be-98f1-d18d-00004ac65b83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8413a4","pattern":"[url:value = 'http://5.182.210.174/8413a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad08db5-f319-d11c-154e-00003f1d4d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/320b53","pattern":"[url:value = 'http://5.182.210.174/320b53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09036550-5027-a862-9723-00001949a54f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1903e1","pattern":"[url:value = 'http://5.182.210.174/1903e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36abd886-3ece-baf0-f73c-0000192b17dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.160.130.168:43943/bin.sh","pattern":"[url:value = 'http://103.160.130.168:43943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abeaeee9-424d-16c1-1268-0000d2677b2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/i","pattern":"[url:value = 'http://119.115.36.34:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16d3b6f-2b30-3f73-89d5-0000b84c3bbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/bin.sh","pattern":"[url:value = 'http://45.194.25.221:39724/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a425480-dda9-1e6e-1580-00005346e648","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/i","pattern":"[url:value = 'http://45.194.25.221:39724/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f63965d-e9cb-4776-3266-000063b2e54c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/bin.sh","pattern":"[url:value = 'http://182.116.120.105:42593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b971ce43-e72a-2f8b-b645-0000f4d1cde4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/i","pattern":"[url:value = 'http://182.116.120.105:42593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f846f6e0-5fc6-a46a-3adb-000080cd3768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/i","pattern":"[url:value = 'http://182.121.155.69:33600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eb1799a-b88a-5b10-bbc5-000046693933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/bin.sh","pattern":"[url:value = 'http://219.155.11.56:58484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18c2464-001e-c643-c149-0000ae4e081e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mpsl","pattern":"[url:value = 'http://185.93.89.72/mirai.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401e13cd-c3c5-f9c7-daa3-0000f6e13c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/bin.sh","pattern":"[url:value = 'http://144.48.123.149:37810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e9da2e-8c6c-ca3e-c882-000064a4599a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.54.103.153/50/givingbesthingsforbetterforme.hta","pattern":"[url:value = 'http://209.54.103.153/50/givingbesthingsforbetterforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316efc5d-dd59-c138-9fcb-000082111a92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/i","pattern":"[url:value = 'http://219.155.11.56:58484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c912aab-9d80-aa27-ae25-0000c93898c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/i","pattern":"[url:value = 'http://123.12.191.97:55649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5737c39d-d355-6f34-8cb2-000059d74fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.arm","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3343ed67-b865-38c9-0871-0000bdeb05b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bash.sh","pattern":"[url:value = 'http://176.65.139.131/phantom_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73e4431-1a40-cd96-f205-000084ab5d14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.x86_64","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302e8804-6cfe-7ed4-16bb-0000dcf3f2ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.mips","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7cdb62-5c2f-e6d2-36aa-0000845a7be8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/dbg","pattern":"[url:value = 'http://176.65.139.132/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afca6404-34d2-b8f6-0177-0000895f68d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/ppc","pattern":"[url:value = 'http://176.65.139.132/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca79759-e65c-d642-2c17-0000e1a97acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mips","pattern":"[url:value = 'http://176.65.139.132/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd8bd73-46be-c90b-4612-00007ba219db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm6","pattern":"[url:value = 'http://176.65.139.132/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8cda5d-2dde-0be9-3196-00000fcb1a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/spc","pattern":"[url:value = 'http://176.65.139.132/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808ba38f-062e-6d65-2e87-0000e15fac11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/m68k","pattern":"[url:value = 'http://176.65.139.132/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704a00dc-ee20-eb5d-ff19-0000e6ec2104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/d.sh","pattern":"[url:value = 'http://176.65.139.132/d.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da988653-b636-886b-e073-00000981f126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/sh4","pattern":"[url:value = 'http://176.65.139.132/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79755190-a059-65bf-631f-00008aaa1481","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mpsl","pattern":"[url:value = 'http://176.65.139.132/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827855ca-d888-47a2-0f9a-0000f15c06a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86","pattern":"[url:value = 'http://176.65.139.132/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a0e2c6-df34-4120-c4db-0000dbca9dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm","pattern":"[url:value = 'http://176.65.139.132/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d1ecc9-3ad8-95e0-3972-00006917b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm5","pattern":"[url:value = 'http://176.65.139.132/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a331991-4ce1-83bc-a94f-00002c775f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/i686","pattern":"[url:value = 'http://176.65.139.132/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18df8de5-2f1f-af57-dba1-0000c31e7ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm7","pattern":"[url:value = 'http://176.65.139.132/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35239654-b686-ccf0-5cb2-00001abf9f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86_64","pattern":"[url:value = 'http://176.65.139.132/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a57576e1-2835-6d00-481c-0000055ca45f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c2","pattern":"[url:value = 'http://176.65.139.132/c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7c275b-5edc-1a2e-cb68-000017e90bb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c1","pattern":"[url:value = 'http://176.65.139.132/c1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abfac54a-428d-f9fb-9b7d-0000629e751a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv6l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d79689-51ed-7332-62db-0000253e0fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv5l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291982ff-64b4-3ad5-39d9-000027302363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i486","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e1f40b-67a5-3761-9a71-00005ffe5caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv7l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cca7c8-3c1a-8763-5529-0000185e267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0037cd-86fe-0933-c577-0000fd06e083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d340fafb-dc28-aa57-b98f-0000d56891eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.x86_64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355ad295-236d-5002-5c4c-0000371e20f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4eb","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--813bdc82-20ef-ee40-5182-00008a41e9f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.armv4tl","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4tl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b025ec8f-74f1-3a0c-9fef-0000a7d07104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.m68k","pattern":"[url:value = 'http://176.65.139.130/bins/bin.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9d5691-365c-a190-1b43-00006af88268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i686","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28dbe8c8-8d1e-9768-14ca-0000ec6cf0c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i586","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1286fbc-68a2-8b60-4a37-0000efe29d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.sh4","pattern":"[url:value = 'http://176.65.139.130/bins/bin.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe26e09c-7607-b694-dc4c-00008c0c72d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mipsel","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e20408-ffda-3976-585f-0000d00d5251","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1d869d-2105-fbd3-00aa-00000f623d03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc-440fp","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc-440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09d859-6e2a-c066-efc9-0000a726a7de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17715e6-f01b-a6bd-63e0-0000a0cdebd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/i","pattern":"[url:value = 'http://144.48.123.149:37810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fed631db-5431-da59-89ee-0000dc47efd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b04f712-ba5c-a3ad-145e-0000b7448198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.67/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fa050d-103b-4357-c0cd-0000dcb13908","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.67/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb234e6-1c6c-8799-84cd-0000c75cc8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a04a4b-bbdd-6737-76c7-000054f9232c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6a83ea-4642-2fa0-fb75-0000edca53d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da91bf1-e329-abce-c1a8-0000464c8cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06000528-d0a7-ca62-5e8d-0000bf5fa6b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.67/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac1852-e1a7-a9b6-d5b6-0000c635c83e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/ohshit.sh","pattern":"[url:value = 'http://94.154.43.67/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7352e77f-d855-92aa-f03a-00003f813f43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.67/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aae2b67-56fc-885a-93f4-0000fef0eba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0446bb71-521b-5069-2f79-000039cbd41b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.spc","pattern":"[url:value = 'http://94.154.43.67/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682d32f1-9ee7-0f51-3a2d-0000e8df5425","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/bin.sh","pattern":"[url:value = 'http://110.36.16.115:34086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e78be04-159c-f0ce-79e0-0000d7e79704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/bin.sh","pattern":"[url:value = 'http://42.234.186.105:46982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53d2e04-0977-9a7d-c67d-0000a010a8fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/bin.sh","pattern":"[url:value = 'http://182.121.155.69:33600/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff629f5-1802-fd44-7a3a-000057e13c78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/i","pattern":"[url:value = 'http://110.36.16.115:34086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eac546b-57bc-78f9-84c6-0000b14316b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/i","pattern":"[url:value = 'http://110.39.233.226:51559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b9985-b88d-d465-e5d9-0000396e646b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/bin.sh","pattern":"[url:value = 'http://212.169.147.128:38805/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17381db3-6c64-5429-e131-0000e400d172","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/bin.sh","pattern":"[url:value = 'http://123.13.115.219:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2be1ac86-cec3-690b-652f-0000c47103bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/i","pattern":"[url:value = 'http://200.115.102.2:47663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff2a570-bc32-3484-b790-00002044f63d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.138.135:48639/bin.sh","pattern":"[url:value = 'http://115.203.138.135:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89f3afe-d26d-43c6-6844-00000e354b00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/i","pattern":"[url:value = 'http://219.156.18.240:56348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c77f929-6656-87c6-071d-0000c8f586e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.202.24.36:37993/bin.sh","pattern":"[url:value = 'http://27.202.24.36:37993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecbd995-b584-cf81-bda1-000053e25a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/i","pattern":"[url:value = 'http://61.52.33.47:57035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a837c-3289-6ed2-ca1c-00002f3ab7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/bin.sh","pattern":"[url:value = 'http://202.1.26.69:42948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1d4cc9-41eb-115e-8b50-000055c284fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3be91ff-af73-548a-11a7-00000e6d5450","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.14:38104/bin.sh","pattern":"[url:value = 'http://221.15.12.14:38104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f7d358-8d05-fd7e-2bde-00001f15cb34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/i","pattern":"[url:value = 'http://123.13.115.219:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d9b5d17-6cf0-fa31-7771-000085d799d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/i","pattern":"[url:value = 'http://115.49.198.105:41583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e0a2-12a6-e789-8ae9-00001cf2aa26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/i","pattern":"[url:value = 'http://182.113.203.41:58932/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff4a808-18a5-6554-d8b4-0000266b141d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.25.171.108:39654/i","pattern":"[url:value = 'http://78.25.171.108:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23032efe-4055-4862-70a0-0000d92243c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/bin.sh","pattern":"[url:value = 'http://123.11.64.213:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af34c2d-f122-a733-ee9c-0000bc9b33f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/i","pattern":"[url:value = 'http://42.235.73.160:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9101a-5e17-7a3f-1945-00006b643b94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/i","pattern":"[url:value = 'http://219.155.132.216:54527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168e570-e7b3-3a46-d820-0000c0e7c3ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/i","pattern":"[url:value = 'http://115.50.51.98:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e04f1f8-f5d5-6fdc-f1f3-0000456b734d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.215.27:37136/i","pattern":"[url:value = 'http://182.113.215.27:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50020564-d5a9-82bf-023f-000028d1b36b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/bin.sh","pattern":"[url:value = 'http://115.50.51.98:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1872e0-77e5-5356-98b2-000053f11691","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.224.62:58009/i","pattern":"[url:value = 'http://182.113.224.62:58009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa05f60-45e3-a851-7786-000057546c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.203.255:46437/i","pattern":"[url:value = 'http://182.126.203.255:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacab5c8-2e29-940a-e4c5-000089c9f3bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/bin.sh","pattern":"[url:value = 'http://115.62.155.31:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72442366-8d7e-150b-a911-0000773400a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/i","pattern":"[url:value = 'http://103.172.186.165:43638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60bf2-d1b6-4776-e255-000083c02d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/i","pattern":"[url:value = 'http://123.12.46.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa01160f-226e-90da-a989-000094b58778","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/i","pattern":"[url:value = 'http://105.186.143.37:55447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf902995-4fa6-7e7f-c47e-0000bbe733d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.57.254:59568/i","pattern":"[url:value = 'http://175.150.57.254:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64562bc-99c4-69f6-a0a3-0000694ffe26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/i","pattern":"[url:value = 'http://123.10.58.106:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f83772-ff36-a26f-eef8-0000806223fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/i","pattern":"[url:value = 'http://115.62.155.31:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8996d244-c9a5-0c71-28ca-00002987f1d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/i","pattern":"[url:value = 'http://178.141.132.110:51968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e13ca23a-d74e-e930-4565-00006ed487e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/bin.sh","pattern":"[url:value = 'http://222.140.218.50:48585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eed49ad-638a-dddf-4a91-0000dad6e11a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.131.48:48702/i","pattern":"[url:value = 'http://123.129.131.48:48702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928f5e6e-373c-7536-bbae-0000ef004d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.236.8:39421/i","pattern":"[url:value = 'http://125.47.236.8:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746d08c5-8940-521f-1f32-000098c8869c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/i","pattern":"[url:value = 'http://123.8.35.65:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b852f4-e946-7c73-5c56-00000b8c9afb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/i","pattern":"[url:value = 'http://125.45.146.236:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3798c839-d373-3ced-3687-0000223bddb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.208.16.252:3588/i","pattern":"[url:value = 'http://58.208.16.252:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e87d5e-0141-f14d-052d-0000a6142b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/bin.sh","pattern":"[url:value = 'http://42.5.247.27:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156e6512-f3e8-7e04-af05-00005954e118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/bin.sh","pattern":"[url:value = 'http://36.97.90.188:53553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd212b70-dee5-5631-9738-00009a9ec014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/i","pattern":"[url:value = 'http://36.97.90.188:53553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fb22b-c8d9-d78a-079a-000086223d1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/bin.sh","pattern":"[url:value = 'http://162.246.26.77:54746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55793f49-a6a0-6249-1565-0000fa3a1010","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/bin.sh","pattern":"[url:value = 'http://182.113.203.41:58932/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db855758-37ee-3deb-8686-0000fef18641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/i","pattern":"[url:value = 'http://66.8.135.142:50653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4551a0a4-cf99-6b7f-84ab-0000986c6ddc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/bin.sh","pattern":"[url:value = 'http://182.127.69.34:57222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a9833-f4f1-f7f4-0af5-0000db1386c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.251.225.122:36907/bin.sh","pattern":"[url:value = 'http://112.251.225.122:36907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5187a86e-deab-c8b2-df25-0000a33d83b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.66.105:43207/bin.sh","pattern":"[url:value = 'http://42.180.66.105:43207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23140b4f-f19f-b687-385d-0000769e82c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/bin.sh","pattern":"[url:value = 'http://125.45.56.103:35641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1c4b5c-090f-797f-d9ec-0000965c5835","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.246.124:41208/bin.sh","pattern":"[url:value = 'http://119.115.246.124:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5fa61-f33c-04f1-b7f3-00008350fbfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/i","pattern":"[url:value = 'http://125.41.2.23:55597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46752bc-1011-91af-7367-000063698953","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/bin.sh","pattern":"[url:value = 'http://178.141.132.110:51968/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--822f072b-c819-590f-f38e-000024fe47b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.157.187:43642/bin.sh","pattern":"[url:value = 'http://42.230.157.187:43642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014c340d-2c02-9879-d14b-000038ee28b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.5.189:45058/bin.sh","pattern":"[url:value = 'http://110.136.5.189:45058/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798b91a2-9269-6000-3db7-00003cba2d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/bin.sh","pattern":"[url:value = 'http://123.8.35.65:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44485420-cbf0-6c55-d28b-00006aeb52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/bin.sh","pattern":"[url:value = 'http://123.12.191.97:55649/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48e18fb-8936-e5f8-4297-0000c5fcef15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/bin.sh","pattern":"[url:value = 'http://39.73.172.141:48914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397e33ab-7d79-dea4-6e2b-0000628dce1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/i","pattern":"[url:value = 'http://125.45.56.103:35641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5e6dd1-68d1-102f-49a7-000024bd731d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/bin.sh","pattern":"[url:value = 'http://222.140.197.124:40018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5dbf536-4f0b-850c-9c97-0000ac5ac2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.114:34219/i","pattern":"[url:value = 'http://115.48.147.114:34219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3875d6-a1d7-9545-e0ba-0000073839ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/i","pattern":"[url:value = 'http://222.138.151.112:58571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a13c236-1be6-7d6b-2615-0000a9e22814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/i","pattern":"[url:value = 'http://222.220.238.254:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd4713f-73ee-2c21-e501-00006cdbb955","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/i","pattern":"[url:value = 'http://27.221.246.187:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c749996-45dd-e5f7-cb55-0000fa0305f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/bin.sh","pattern":"[url:value = 'http://119.115.36.34:51030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77bceee-f8c3-6558-6eb6-0000c5a4ea87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/bin.sh","pattern":"[url:value = 'http://42.234.191.110:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c98247a-f94c-c862-deb9-0000a22c5274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/bin.sh","pattern":"[url:value = 'http://182.116.85.112:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5d216c-6d9c-93b7-95b7-00002cfe4f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/i","pattern":"[url:value = 'http://42.234.191.110:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07952194-546d-8644-5091-0000029627ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.148.216.12:43983/bin.sh","pattern":"[url:value = 'http://123.148.216.12:43983/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57dce9b8-0272-a8af-c893-00003fe23c0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/i","pattern":"[url:value = 'http://125.44.52.171:42860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3ad6fb-c655-ae51-5abb-00005c89624f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.32/zot","pattern":"[url:value = 'http://213.177.179.32/zot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7645deaf-0879-7f09-b76e-00003f5f020b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/i","pattern":"[url:value = 'http://222.140.197.124:40018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb3d0847-4c85-3ea1-98d8-000011121849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.241.62:53088/bin.sh","pattern":"[url:value = 'http://115.55.241.62:53088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7eb39a-696f-0684-30ee-00007ca7d965","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/i","pattern":"[url:value = 'http://83.219.1.198:35955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9ba1-24fd-d4d7-a6f0-0000a9ce9f5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/bin.sh","pattern":"[url:value = 'http://105.186.143.37:55447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3711cea-497c-b4a1-5bc4-000091760cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/i","pattern":"[url:value = 'http://212.169.147.128:38805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a57d199-fbe9-1965-3ba2-00006b98f6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.7.234:37031/bin.sh","pattern":"[url:value = 'http://175.175.7.234:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d20755-3c33-bac9-c0fd-0000b99d8c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/i","pattern":"[url:value = 'http://125.44.18.255:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53b37d6-24b3-33e4-e245-00005c7e45d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/i","pattern":"[url:value = 'http://42.5.247.27:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5130d6eb-c1ae-2407-3095-0000a07a288b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:54934/bin.sh","pattern":"[url:value = 'http://95.9.35.137:54934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7291f94c-9ac3-49f2-3ad4-0000cf80c85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.78.13:52046/bin.sh","pattern":"[url:value = 'http://175.173.78.13:52046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281f9ab4-78dd-8b33-41f0-000030877c2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.189.81:42693/bin.sh","pattern":"[url:value = 'http://123.14.189.81:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be9b52c-5de1-fc22-6d33-00008545fa70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/bin.sh","pattern":"[url:value = 'http://115.57.185.130:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb45a9d-7f47-831b-8438-00008de5ac88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/bin.sh","pattern":"[url:value = 'http://222.138.151.112:58571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04822737-59e1-74c0-9de3-00000c21e6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/bin.sh","pattern":"[url:value = 'http://219.155.132.216:54527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3e9d186-0ab2-64be-0c03-0000503b8cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/bin.sh","pattern":"[url:value = 'http://61.52.33.47:57035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1b89-da9e-98d9-bed7-0000a4131048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/i","pattern":"[url:value = 'http://61.137.195.76:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4721635c-dd28-f5cd-cde4-00009369ba07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/bin.sh","pattern":"[url:value = 'http://83.219.1.198:35955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab217bc-6df9-5ac9-b2c7-000018de1406","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/i","pattern":"[url:value = 'http://42.85.134.175:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1733cd35-1b0b-b850-2d38-00001752aad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/bin.sh","pattern":"[url:value = 'http://115.57.215.99:50083/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c50dde-d139-b60b-3166-00002dc11582","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/i","pattern":"[url:value = 'http://175.149.219.183:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82832241-6654-296d-b018-0000562d3661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/bin.sh","pattern":"[url:value = 'http://110.39.233.226:51559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47086850-d83d-2bcf-1103-00003b3502c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/i","pattern":"[url:value = 'http://222.140.218.50:48585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397fdf19-ca81-319c-2b48-0000219b6815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/bin.sh","pattern":"[url:value = 'http://123.10.58.106:59256/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9edbaf-3a6c-ae3e-5eda-00005329fdea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.160:52311/bin.sh","pattern":"[url:value = 'http://120.28.194.160:52311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5626c54f-4a1d-6068-e27b-0000eb3029f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/i","pattern":"[url:value = 'http://175.151.64.247:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ea982-7ba9-ff35-c3c2-00007eb53370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.2.69:46177/i","pattern":"[url:value = 'http://182.117.2.69:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97aa1e7-a246-38f3-7672-00005f1796d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/i","pattern":"[url:value = 'http://219.155.228.87:54535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb52b1e-825e-30c9-6000-00002fb571d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/i","pattern":"[url:value = 'http://115.57.185.130:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ca75fe-ec4b-54ec-e119-000062d5bdae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/i","pattern":"[url:value = 'http://125.40.159.186:42538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c6870d-194b-6678-e5b5-0000fa6bbf9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/bin.sh","pattern":"[url:value = 'http://221.14.14.94:38720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d199ae-520f-6444-117e-000076c7e61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.195.40:53219/bin.sh","pattern":"[url:value = 'http://112.198.195.40:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0965093-e19b-6e3d-525c-0000a8f428d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.118.145:47315/i","pattern":"[url:value = 'http://61.53.118.145:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e2f291a-d36a-ee84-f8b9-00000a50c184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/bin.sh","pattern":"[url:value = 'http://123.12.46.36:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f7f615-fc54-25aa-b1e7-00008fa40539","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.197.66:51494/bin.sh","pattern":"[url:value = 'http://61.137.197.66:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64984b9a-f8c2-32f3-4dd0-0000e9abf554","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/bin.sh","pattern":"[url:value = 'http://125.41.2.23:55597/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d5248b-864f-2b25-8c6c-00001e4776e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/bin.sh","pattern":"[url:value = 'http://27.221.246.187:34948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfde8d-c5ad-1c58-495e-0000144ceafb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/i","pattern":"[url:value = 'http://115.57.215.99:50083/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec24814c-6115-b1ab-52af-0000936d7c3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/bin.sh","pattern":"[url:value = 'http://42.85.134.175:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb579c5-478c-e040-2ac5-000026e49497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/i","pattern":"[url:value = 'http://221.14.14.94:38720/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41aa7c44-d694-35d8-50a5-0000366c1cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/bin.sh","pattern":"[url:value = 'http://219.156.18.240:56348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8112b2-dd51-a662-2df8-0000d0e7ac28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/bin.sh","pattern":"[url:value = 'http://113.230.51.31:34338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b4b374-1076-311a-0819-0000a46a0f5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.229.171:36842/bin.sh","pattern":"[url:value = 'http://219.155.229.171:36842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b51da7-8738-77e6-8813-00006c2625a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.232.174:49324/i","pattern":"[url:value = 'http://222.137.232.174:49324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a94dfaa-f531-48e7-a03e-0000d15b13cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.52:57834/bin.sh","pattern":"[url:value = 'http://182.129.144.52:57834/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f0d6ea-bf0c-82d1-3d60-00003adc8078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/bin.sh","pattern":"[url:value = 'http://125.40.159.186:42538/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c2fa8f-134c-669d-9fcc-00008526b3cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/i","pattern":"[url:value = 'http://182.116.85.112:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684c608e-84ed-09f8-7e5f-0000054a1550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.73.48:41032/i","pattern":"[url:value = 'http://175.151.73.48:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--217c4a0e-7e63-82ad-a28f-0000adcdf21d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/i","pattern":"[url:value = 'http://114.228.239.251:54062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e515aa-1115-3514-6302-0000c74c6d5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.226.228:44054/i","pattern":"[url:value = 'http://27.37.226.228:44054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1582c38d-965b-4308-475b-0000fefaabe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/i","pattern":"[url:value = 'http://42.225.220.81:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94a1053f-a76f-fe34-81ff-000007e780ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/i","pattern":"[url:value = 'http://182.119.120.150:46472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbf3c24-d4bd-d599-016d-0000e31f7ccb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/bin.sh","pattern":"[url:value = 'http://222.220.238.254:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e876a64-fa1e-09e5-06f3-00005766b392","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/i","pattern":"[url:value = 'http://222.137.39.216:48007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcab9f-da08-aec0-e4c1-0000fbc161ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.6.81:41787/i","pattern":"[url:value = 'http://140.237.6.81:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1caa21c3-8261-2b4a-e045-0000dd0332be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.62.77:52860/i","pattern":"[url:value = 'http://112.242.62.77:52860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1fe838-76cd-5373-eb2f-0000c5a185cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/i","pattern":"[url:value = 'http://123.188.223.103:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7109b6c5-78ce-de3e-485e-0000a851a0ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.31.123:48146/i","pattern":"[url:value = 'http://115.203.31.123:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c18c53-0d8d-7c6b-1c16-0000e1d9f0b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/i","pattern":"[url:value = 'http://36.69.88.195:51348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ac3fda-b32e-f3ee-a0ce-0000f3d6305e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/syss","pattern":"[url:value = 'http://223.76.100.36/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722fbadf-8bfe-d922-d5f2-0000c7584cba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/amd","pattern":"[url:value = 'http://223.76.100.36/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017dc03a-5eba-ae8a-7fd2-000038c4ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/i","pattern":"[url:value = 'http://42.234.186.105:46982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f029cc18-60ff-dee9-b94a-0000c3beb7b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/bin.sh","pattern":"[url:value = 'http://219.155.228.87:54535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06968cd-5dd6-2a7e-6a35-0000f44b781e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.120.104.147:8080/d/installer-4","pattern":"[url:value = 'http://87.120.104.147:8080/d/installer-4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a2b13f-ca79-04fa-90fa-00001e47ba7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.136.11:53679/i","pattern":"[url:value = 'http://42.235.136.11:53679/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48d14e2-7812-5060-e895-0000e3b7696c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.197.245:54778/bin.sh","pattern":"[url:value = 'http://36.70.197.245:54778/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d24d0717-d9e3-04a4-3702-0000aa335b63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.193.159:51649/i","pattern":"[url:value = 'http://125.42.193.159:51649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d25159a-157d-8085-4088-000078434ae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.179:51284/i","pattern":"[url:value = 'http://27.37.101.179:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c4b197-fb09-c273-d1b9-00006dfd728d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/bin.sh","pattern":"[url:value = 'http://125.43.36.213:55623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f480240-d8de-320b-ee5a-0000cedd6361","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd8cd14-c8d3-b24f-a448-00001905bd1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.152.192:37513/bin.sh","pattern":"[url:value = 'http://61.53.152.192:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb81fd2-3741-d525-7898-0000729b910b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/bin.sh","pattern":"[url:value = 'http://125.44.18.255:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a132a24e-25bd-b8cd-a7ca-0000da946a2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/i","pattern":"[url:value = 'http://125.43.36.213:55623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77430d76-b8a0-5df3-9c23-0000fe713f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/bin.sh","pattern":"[url:value = 'http://110.36.86.83:58585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725546e0-d54c-a1a7-5bd0-0000e0b6d884","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/i","pattern":"[url:value = 'http://110.36.86.83:58585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3f70c7-0cef-f279-2726-0000f9cf91cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/bin.sh","pattern":"[url:value = 'http://125.44.52.171:42860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c47f77e-ae29-90fe-0cc2-0000195ca3d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/i","pattern":"[url:value = 'http://42.235.50.219:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b408eb9f-954b-b57f-de4a-0000b16818c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/144.exe","pattern":"[url:value = 'http://serdaregitim.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4252ad5b-1c2a-dfdd-3e55-00000a5376c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/3.exe","pattern":"[url:value = 'http://serdaregitim.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883583d8-f447-528e-3b6b-000031f12e05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://166.0.192.57/loader","pattern":"[url:value = 'http://166.0.192.57/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873aeecc-3d87-7e5a-d107-00006a322ddd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/bin.sh","pattern":"[url:value = 'http://39.87.217.20:54835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f809643-3bfc-30b5-2d95-00004c09d8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/i","pattern":"[url:value = 'http://39.87.217.20:54835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5c959a-e8bb-b5b4-08ce-00006a191bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/bin.sh","pattern":"[url:value = 'http://222.138.238.78:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f115fd24-f92c-2474-4151-000007fdd078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/bin.sh","pattern":"[url:value = 'http://182.121.115.176:33524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15cfa2b1-9567-301e-240e-0000a700d0d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/i","pattern":"[url:value = 'http://182.121.115.176:33524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f952594a-ef65-4f58-5081-000067679b84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/bin.sh","pattern":"[url:value = 'http://42.230.54.173:38816/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bfa500-c7d4-1f26-8363-00007cd8a35b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/bin.sh","pattern":"[url:value = 'http://101.109.232.82:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd744067-554c-a7d0-dad2-00001eff62e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/bin.sh","pattern":"[url:value = 'http://182.113.206.161:49109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b23f4a-2045-e922-493e-0000f4cab5b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/i","pattern":"[url:value = 'http://222.138.238.78:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c675dd-83c1-ab34-aa97-00005168092d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/i","pattern":"[url:value = 'http://42.230.54.173:38816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--053971b3-c769-f70f-3d93-00005a4fc55d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/i","pattern":"[url:value = 'http://101.109.232.82:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a203eed2-dd91-eb3a-6301-0000238f2b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/i","pattern":"[url:value = 'http://182.113.206.161:49109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c80cc0-8eae-3f3b-a065-00005cd3d659","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.78.32:51467/i","pattern":"[url:value = 'http://42.226.78.32:51467/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0cbab6-6cc4-4846-4175-00002239cdca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/bin.sh","pattern":"[url:value = 'http://182.116.119.9:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876cf71a-bff8-86c3-1bee-0000fa3e3986","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/i","pattern":"[url:value = 'http://179.108.89.220:55094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef668de-a5ad-ca1f-27ef-00008a9bebbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/i","pattern":"[url:value = 'http://182.116.119.9:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e910c1-d190-dd03-6047-0000f70ff14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/bin.sh","pattern":"[url:value = 'http://27.215.181.39:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cedcf7f9-defb-ffd6-7af8-00009afbe4ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/i","pattern":"[url:value = 'http://27.215.181.39:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b434b06e-f8df-e7cb-1f62-0000734ef93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/bin.sh","pattern":"[url:value = 'http://182.121.46.253:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df2b037-f980-269b-18a8-000062248b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/i","pattern":"[url:value = 'http://182.121.46.253:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8362d282-f350-40f3-41a1-000006752d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/bin.sh","pattern":"[url:value = 'http://115.49.198.105:41583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9984ddd7-26da-75ae-8735-0000a2f39ae9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/bin.sh","pattern":"[url:value = 'http://110.38.221.182:35958/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e0db074-d96d-1a9a-c309-00003dfa57a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/bin.sh","pattern":"[url:value = 'http://118.232.137.101:42009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f98632-4cfd-13ca-13f5-00007a21017d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/bin.sh","pattern":"[url:value = 'http://103.172.186.165:43638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db069ccb-f12e-e62c-b6f2-00005d1b5cf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/i","pattern":"[url:value = 'http://110.38.221.182:35958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada811ff-ae6a-10a0-12cf-0000c13a7924","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/bin.sh","pattern":"[url:value = 'http://222.141.82.215:49425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0649bd63-db88-ffa5-6034-0000e08c1910","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/i","pattern":"[url:value = 'http://118.232.137.101:42009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7758f539-964b-6afb-416b-0000d3b757f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/bin.sh","pattern":"[url:value = 'http://42.235.50.219:33430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba9aec0-0b83-328d-625d-0000fa5759de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/i","pattern":"[url:value = 'http://222.141.82.215:49425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c6c875-fe40-9712-3d73-0000d768d556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/bin.sh","pattern":"[url:value = 'http://42.178.168.78:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fcf583-2a80-8290-c9db-0000cac54b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/i","pattern":"[url:value = 'http://42.178.168.78:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb537ed3-8c32-14e1-5cec-000038679a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/bin.sh","pattern":"[url:value = 'http://115.55.233.2:37781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e01a6d6-4020-fde6-ae33-0000f22827eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/bin.sh","pattern":"[url:value = 'http://47.215.224.64:37433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad98508-78d5-66f3-bc90-0000439e1202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.235.157.125:52016/i","pattern":"[url:value = 'http://122.235.157.125:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15925df-8581-2235-eaed-000088e70ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/i","pattern":"[url:value = 'http://115.55.233.2:37781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee7fbdd-6ba3-190b-ff72-0000b801ac3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/i","pattern":"[url:value = 'http://47.215.224.64:37433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fac271-73f8-2cb5-d379-000005e1e9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.194:45299/i","pattern":"[url:value = 'http://110.36.72.194:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d403f419-85b6-6973-552d-00000e58a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.188:46150/bin.sh","pattern":"[url:value = 'http://182.117.68.188:46150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15114933-16ee-452f-a3fe-00009950cacc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://96.245.232.233:44492/i","pattern":"[url:value = 'http://96.245.232.233:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d56e5a-d832-c35f-d571-0000989a8e42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/i","pattern":"[url:value = 'http://110.37.43.119:54028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dc5980-eb4b-23d2-f458-0000f15f2628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/bin.sh","pattern":"[url:value = 'http://119.183.3.192:41382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1c2656-497a-ed60-2146-00004b98c8a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/bin.sh","pattern":"[url:value = 'http://42.225.220.81:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea8c142-9b6a-da48-308e-00008d84d10b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.162.111:53842/i","pattern":"[url:value = 'http://182.121.162.111:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1c5227-37b6-5629-50e6-000055f876ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mipsel","pattern":"[url:value = 'http://45.38.249.63/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--906a3f94-db25-4c40-826b-0000fbd5f768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mips","pattern":"[url:value = 'http://45.38.249.63/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d5c33-d846-5e8e-6271-0000bae47000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/bbc","pattern":"[url:value = 'http://45.38.249.63/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1154be-c3cc-9eb6-7afe-00008fd12e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_powerpc","pattern":"[url:value = 'http://45.38.249.63/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937a4840-9d49-b5af-56b3-00000c9c95d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86_64","pattern":"[url:value = 'http://45.38.249.63/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1b7492-8332-eacf-0190-0000cbd75cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm4","pattern":"[url:value = 'http://45.38.249.63/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331515be-9f3d-9a34-6710-000061de9478","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm6","pattern":"[url:value = 'http://45.38.249.63/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4786a-24f6-65b2-df91-0000876b9f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_aarch64","pattern":"[url:value = 'http://45.38.249.63/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c4404-51a0-c5df-42b4-0000736b3b96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm5","pattern":"[url:value = 'http://45.38.249.63/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44122528-ca1b-77f3-d497-0000d962f31d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm7","pattern":"[url:value = 'http://45.38.249.63/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcba9c71-8811-3583-e6cb-00005705d8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86","pattern":"[url:value = 'http://45.38.249.63/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c47c7f-f18a-a811-e813-0000b4585ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm6","pattern":"[url:value = 'http://2.26.81.46/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40823716-2225-96a4-efee-00007f6cd814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189a956e-6254-533a-034b-0000aad3a799","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/bin.sh","pattern":"[url:value = 'http://222.142.250.250:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dfc762d-5ba7-5fd4-b78c-0000098df017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/i","pattern":"[url:value = 'http://222.142.250.250:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278a792-0424-52d3-6dca-0000b579fa82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/bin.sh","pattern":"[url:value = 'http://179.108.89.220:55094/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24c5d007-8eac-7655-e69a-00009b0fa02f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/i","pattern":"[url:value = 'http://220.192.252.142:56157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e95cbf-7891-f653-e9ad-0000f5acb417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/bin.sh","pattern":"[url:value = 'http://1.58.182.84:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fbb00d-c739-4149-b863-0000320453b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/i","pattern":"[url:value = 'http://42.230.18.71:37623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2e2558-2d2f-5d58-4bda-0000a2fce713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/bin.sh","pattern":"[url:value = 'http://42.230.18.71:37623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c587810b-7f98-2cc7-3eef-0000a9671503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/bin.sh","pattern":"[url:value = 'http://182.127.177.126:47422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895236e1-0394-1d4c-4ac0-0000502f5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/bin.sh","pattern":"[url:value = 'http://27.37.229.199:49596/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4592ec-3d66-ad80-fed9-0000114f3176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.70.28:58014/i","pattern":"[url:value = 'http://110.36.70.28:58014/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab97099a-6fc9-d861-e73d-0000bb5bc58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/i","pattern":"[url:value = 'http://182.127.177.126:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83004697-3c60-ed07-cf67-0000aa0903db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.113.119:35309/i","pattern":"[url:value = 'http://125.40.113.119:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cec78f5-baea-6f08-bf83-00000923a954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/bin.sh","pattern":"[url:value = 'http://27.201.110.150:57334/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69db9e4-bca7-2a22-4afb-0000e124c76c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/i","pattern":"[url:value = 'http://27.201.110.150:57334/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc739be-a7e7-e270-5978-000030324cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/bin.sh","pattern":"[url:value = 'http://175.174.68.59:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751e6737-6138-57ff-f1e0-000005e176cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/bin.sh","pattern":"[url:value = 'http://78.165.236.7:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4736a3c9-1eb1-52ca-0e7f-000020989295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/bin.sh","pattern":"[url:value = 'http://125.45.146.236:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6786d90b-d19f-afd4-7efc-0000ac02f26b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/i","pattern":"[url:value = 'http://78.165.236.7:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222edaa9-ba46-9235-9aa3-000085de0339","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/bin.sh","pattern":"[url:value = 'http://59.96.139.213:39951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbb7a1-51b1-129c-ca99-0000dbfb2033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/bin.sh","pattern":"[url:value = 'http://222.137.39.216:48007/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37388c34-bbf5-cee8-95e0-00006820670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/i","pattern":"[url:value = 'http://175.174.68.59:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7fd13a7-cd28-fc83-4617-00008aa2c18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.31.205:34885/i","pattern":"[url:value = 'http://110.36.31.205:34885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b08c4-cb02-ecf2-efab-00004b07696d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/bin.sh","pattern":"[url:value = 'http://138.255.178.214:43405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b2077-0eb0-8ea1-47ac-0000ccf59756","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/i","pattern":"[url:value = 'http://59.96.139.213:39951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335a2a72-a16e-27ae-d103-000047d68d61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/i","pattern":"[url:value = 'http://138.255.178.214:43405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fba612-fc38-9733-9bc5-000039e6024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/bin.sh","pattern":"[url:value = 'http://105.184.72.21:54289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa76e1a4-86ee-a8dd-29ee-0000d404a61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/bin.sh","pattern":"[url:value = 'http://42.231.93.114:47497/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ade7cf-d635-0134-085f-0000d7dd2e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.183.165:44707/i","pattern":"[url:value = 'http://105.186.183.165:44707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbea3596-2ada-2227-6af5-0000ef0648f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/bin.sh","pattern":"[url:value = 'http://36.69.88.195:51348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73204d35-5f3f-9412-0ae3-0000a86f7326","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/i","pattern":"[url:value = 'http://42.231.93.114:47497/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823c54d6-4418-4efe-43b6-00008ccae879","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.4.125:43311/i","pattern":"[url:value = 'http://110.36.4.125:43311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e138016b-61b4-032b-ac9f-000081ede851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.165:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a8ffa4-b9a1-9b7b-ed61-0000612e667f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.32.70:38815/i","pattern":"[url:value = 'http://105.184.32.70:38815/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d34d0c-ac1c-1bc9-30a2-0000a7610e0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://lomeqpe.com/Update_bde3c4.msi","pattern":"[url:value = 'https://lomeqpe.com/Update_bde3c4.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e2506f-312e-7eb9-c868-000043421742","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/i","pattern":"[url:value = 'http://182.117.78.165:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde58ed3-7454-c3f7-eb55-00000ed96d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.78:52922/i","pattern":"[url:value = 'http://222.142.252.78:52922/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8401674-7ff7-f3e1-b365-0000cdca719d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.133.165:47739/i","pattern":"[url:value = 'http://123.129.133.165:47739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd55190-3468-640c-bcf7-00005c7cb73b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fd7237-c451-2556-3539-00000b57239b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/bin.sh","pattern":"[url:value = 'http://115.63.203.149:37425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0465d295-9e06-c3c0-2375-000081780dfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/bin.sh","pattern":"[url:value = 'http://110.37.68.65:46979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e97557-6030-90dc-4561-0000161baa50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_sh4","pattern":"[url:value = 'http://62.60.249.165/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d111c2-0839-c501-18dd-0000c450c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm","pattern":"[url:value = 'http://62.60.249.165/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e66e47a-170f-683f-85e2-000033d35ad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mpsl","pattern":"[url:value = 'http://62.60.249.165/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab9cd22-ce5b-df72-1801-000003567521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86_64","pattern":"[url:value = 'http://62.60.249.165/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb422b3-a89e-1dd7-3225-000058d03499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mips","pattern":"[url:value = 'http://62.60.249.165/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09a6ce-9ebc-6ab4-3565-0000eec65dd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86","pattern":"[url:value = 'http://62.60.249.165/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30519d5-83b8-e310-5ec8-0000945eef21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/bin.sh","pattern":"[url:value = 'http://125.44.32.162:44822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--611004e1-ccf7-ee01-d1f9-0000258d2a38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.34.229:59705/i","pattern":"[url:value = 'http://105.184.34.229:59705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61f88ab-2b9e-6eaa-29b8-00005f09e82f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.106.66:43071/i","pattern":"[url:value = 'http://221.14.106.66:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7bb888-406f-d609-8f12-0000f09b839e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/bin.sh","pattern":"[url:value = 'http://114.228.239.251:54062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5e6568-f7df-1c98-646d-000026eb3c9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/i","pattern":"[url:value = 'http://110.37.68.65:46979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ee55d1-94c6-a63c-5f48-0000f8437ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/i","pattern":"[url:value = 'http://125.44.32.162:44822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4873e5-bd96-6edc-e7f2-0000274ab43d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.141.211:58754/i","pattern":"[url:value = 'http://182.121.141.211:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145aa8a6-9097-1c4f-d709-0000c4e3ea63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/bin.sh","pattern":"[url:value = 'http://219.157.215.95:55907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75a55654-c31f-f323-7fad-0000d59e6e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/bin.sh","pattern":"[url:value = 'http://222.141.143.158:55288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1c4408-4ea6-7d10-a8bd-00007a71c227","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/bin.sh","pattern":"[url:value = 'http://182.119.29.169:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a316ef38-5fda-967c-6838-0000f33cab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/i","pattern":"[url:value = 'http://219.157.215.95:55907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29394689-f756-79c6-aa58-0000e3b40503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/bin.sh","pattern":"[url:value = 'http://115.57.249.167:38186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf7836b-5105-558f-7a0c-00008383cde2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/i","pattern":"[url:value = 'http://115.57.249.167:38186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489bb36c-0e26-853a-4070-00001d8ec015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/bin.sh","pattern":"[url:value = 'http://180.191.228.111:60353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a48bd9-f3c0-d77f-b381-00007fe26d99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/bin.sh","pattern":"[url:value = 'http://115.57.248.80:32935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f88ff3-d1a9-0fda-47be-00004c8976a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/i","pattern":"[url:value = 'http://182.119.29.169:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce76465-9fff-5f6d-0479-000085959591","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/i","pattern":"[url:value = 'http://180.191.228.111:60353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66d4fa3-ad34-b68c-6813-00006baae85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/bin.sh","pattern":"[url:value = 'http://115.48.148.23:42173/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733a61a1-f912-0187-4033-00009626f1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/i","pattern":"[url:value = 'http://222.141.143.158:55288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470007e2-7c53-153b-ed3e-00001151d7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/i","pattern":"[url:value = 'http://115.48.148.23:42173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7caefc07-3cb1-51f3-e354-0000785e7309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/i","pattern":"[url:value = 'http://175.174.107.238:46076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ea2d091-c715-3faf-96ee-0000b147909c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/bin.sh","pattern":"[url:value = 'http://123.11.201.153:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce4b430-75bc-1de9-5cf1-0000f7d3edef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/bin.sh","pattern":"[url:value = 'http://125.41.2.135:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4932d811-f7b0-014d-6eb0-000068a49237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/i","pattern":"[url:value = 'http://123.11.201.153:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86ad91f-9b3a-e9c0-d4b6-00001e91575b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/i","pattern":"[url:value = 'http://125.41.2.135:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62babce6-dc3f-26ab-a1c0-00003add52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/i","pattern":"[url:value = 'http://115.57.248.80:32935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9913ea-8ffb-101e-5283-0000b83f7ab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.6.205:46320/i","pattern":"[url:value = 'http://125.41.6.205:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edc7c5f-341d-fefe-5b91-00009f7984a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/bin.sh","pattern":"[url:value = 'http://116.76.206.254:50342/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a27b90-86b8-5662-d1f9-0000fd769fbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.228.78:44625/i","pattern":"[url:value = 'http://110.39.228.78:44625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff627cc0-6c58-8984-b0ec-000045efe59f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/i","pattern":"[url:value = 'http://110.36.22.249:44558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c01af-47a5-8da3-a754-00000d9102ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/bin.sh","pattern":"[url:value = 'http://117.223.140.197:37526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c170bf57-d9dc-0ef9-dfb9-0000aeddbe11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/bin.sh","pattern":"[url:value = 'http://27.217.139.36:39257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c61ecc-ca7e-5b7d-8d36-0000ca857299","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/i","pattern":"[url:value = 'http://117.223.140.197:37526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01720c58-63ca-e539-5fb1-0000846765bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/bin.sh","pattern":"[url:value = 'http://222.139.192.15:47283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e6a33e-89fc-3105-ba76-000016c02527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_865135af23551105.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_865135af23551105.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd5a6da-ac85-3242-4738-00007a8cc833","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/i","pattern":"[url:value = 'http://27.217.139.36:39257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a279e74-d526-d64c-7da9-0000ed469797","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/bin.sh","pattern":"[url:value = 'http://196.189.69.192:41745/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e1d394-fcdf-5a88-a5c5-000073741146","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/bin.sh","pattern":"[url:value = 'http://27.207.141.23:38567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508016f8-b031-88e9-021c-0000be815161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/i","pattern":"[url:value = 'http://123.190.18.137:43516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7233f350-bfa9-c028-8779-0000188bb804","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/i","pattern":"[url:value = 'http://222.139.192.15:47283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9845922c-fe0a-a5db-3cc0-000080e0a735","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/i","pattern":"[url:value = 'http://196.189.69.192:41745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49877565-67c1-b987-c19e-00009bfed71c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/bin.sh","pattern":"[url:value = 'http://183.48.166.95:59376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d909315-df59-26f9-91a9-000044f86ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/i","pattern":"[url:value = 'http://27.207.141.23:38567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f25ea87-cffa-edfc-e36c-0000ff998715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.187.158.17:55290/bin.sh","pattern":"[url:value = 'http://119.187.158.17:55290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bada289-c880-92d3-ba34-00002ec464f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/bin.sh","pattern":"[url:value = 'http://182.127.190.111:33526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba24a2e-f913-94e7-251c-0000f4eb4bf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/omega/file.exe","pattern":"[url:value = 'http://62.60.226.140/files/omega/file.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d506c90d-b492-6bcb-a9ca-00000ff51f1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/i","pattern":"[url:value = 'http://113.230.51.31:34338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904c6fd1-83b6-4e65-f61a-0000e53260ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/i","pattern":"[url:value = 'http://183.48.166.95:59376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b78216-f34e-d991-4738-0000b06d46d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/bin.sh","pattern":"[url:value = 'http://182.116.34.137:45967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748d28db-cf16-a4f7-8f2a-0000bbfece3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.62.97:46336/i","pattern":"[url:value = 'http://182.119.62.97:46336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f676717c-8da7-da42-d81e-000026df48d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/i","pattern":"[url:value = 'http://182.127.190.111:33526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d38a2343-fd10-3253-8cf1-0000356e6bbb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/i","pattern":"[url:value = 'http://182.124.9.99:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c016fe3-c9c2-ce89-4dda-0000cab06cb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.13.17.211:57271/i","pattern":"[url:value = 'http://95.13.17.211:57271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b538220b-2671-135d-2c30-000077935444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/i","pattern":"[url:value = 'http://182.116.34.137:45967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734b930-554e-2579-40b8-0000c4ae415d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/bin.sh","pattern":"[url:value = 'http://182.120.10.85:50338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec778d5-c108-f577-2b47-00009dd216c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/i","pattern":"[url:value = 'http://196.190.105.170:60232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68ebf153-bb9a-be46-6858-0000a0f33e23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/bin.sh","pattern":"[url:value = 'http://110.37.43.119:54028/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abe43df-0daf-1ee6-60d2-0000852eb574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/bin.sh","pattern":"[url:value = 'http://222.140.196.94:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ceb1de-7f2a-dc92-081c-0000f2632da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/i","pattern":"[url:value = 'http://222.140.196.94:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031ddc07-6f67-57fb-35e0-0000bfb2b5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:48403/bin.sh","pattern":"[url:value = 'http://210.208.110.42:48403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2364339a-b674-1341-bc2e-0000ba46b8da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/bin.sh","pattern":"[url:value = 'http://42.85.15.27:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7438cdb-45e5-c1a4-0d40-00000d4958c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/i","pattern":"[url:value = 'http://42.86.137.34:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad23381a-7dca-6449-418d-0000503fae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/i","pattern":"[url:value = 'http://42.58.252.41:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6926ab9-29b6-a5db-18f0-0000bfeaf1c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.57.85:57947/i","pattern":"[url:value = 'http://42.180.57.85:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc00995-3b41-eacd-a37b-0000450846a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.24.140:51609/i","pattern":"[url:value = 'http://110.36.24.140:51609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e899ffc-3d24-6ea7-7b2e-00002a156275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/i","pattern":"[url:value = 'http://110.36.91.33:35795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e99e17-f7f9-f61c-2acf-0000db0b0d46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/i","pattern":"[url:value = 'http://110.36.72.182:41495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302fe188-ffd9-4845-6ac6-0000f7e4f052","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/i","pattern":"[url:value = 'http://110.36.1.200:60120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861d2fa4-44f1-b079-639b-00005b1de420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/bin.sh","pattern":"[url:value = 'http://110.36.22.249:44558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58837e62-a4ae-d765-a697-00007a28dc5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/bin.sh","pattern":"[url:value = 'http://196.189.35.226:40707/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ad8339-14b2-78be-b69a-000067058fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.94.51:47055/i","pattern":"[url:value = 'http://123.14.94.51:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01fb959a-d4a5-ad1d-ad07-000022ab2d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/i","pattern":"[url:value = 'http://182.120.10.85:50338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9d4b-53e3-e694-8992-00007d385d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/bin.sh","pattern":"[url:value = 'http://182.119.120.150:46472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1d6918-3985-5f15-0830-0000317a0b2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://185.141.233.178:38076/i","pattern":"[url:value = 'http://185.141.233.178:38076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6489f685-8e17-1686-9605-0000c50ae11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/i","pattern":"[url:value = 'http://79.106.74.167:44091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460eb40-4b74-d28d-af0c-000074d48325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/i","pattern":"[url:value = 'http://163.142.77.145:55241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0214d7b-cc96-de92-1c94-0000a56ce3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/bin.sh","pattern":"[url:value = 'http://182.85.43.191:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb69b60-63cc-6223-bc1e-00000c16cbc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/i","pattern":"[url:value = 'http://222.136.169.228:49263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae055804-5088-b518-6fe7-0000f177ce0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.254.40:36271/i","pattern":"[url:value = 'http://182.119.254.40:36271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52b1bff-40d1-e209-a0ea-00004f64432c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.160.44:57722/i","pattern":"[url:value = 'http://222.140.160.44:57722/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055fc2d8-7b93-484e-bb2b-000075f4d88a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/bin.sh","pattern":"[url:value = 'http://175.149.87.101:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62a9140-61b2-9ee9-391f-0000370dba55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/bin.sh","pattern":"[url:value = 'http://222.136.169.228:49263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef39c7e-7233-53c0-e8ec-00005359667a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/i","pattern":"[url:value = 'http://182.116.113.206:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9e650-9149-31a3-d886-0000493865d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/i","pattern":"[url:value = 'http://175.149.87.101:45262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f64ca02-9719-701c-84b0-00008c380b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/bin.sh","pattern":"[url:value = 'http://74.127.168.68:33881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604db660-b957-924b-8d94-00000653bafd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/bin.sh","pattern":"[url:value = 'http://175.146.231.101:47081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--399d05c5-0296-bb5c-f96f-000090db0a80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.52/got","pattern":"[url:value = 'http://213.177.179.52/got']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe79ed9-a7ea-e2c5-3aed-0000a7829b41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/bin.sh","pattern":"[url:value = 'http://27.156.139.177:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a4c8a9-c6ba-5a7c-a596-0000f0471972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.83.220:36412/i","pattern":"[url:value = 'http://125.40.83.220:36412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2ed00d-9116-0582-fbc7-0000a1401ec2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/i","pattern":"[url:value = 'http://140.237.44.234:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e13ec8f-4494-da8c-39ca-0000686ae433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/bin.sh","pattern":"[url:value = 'http://119.116.142.166:55362/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a367c386-2967-1062-6bcb-000022cf5249","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/bin.sh","pattern":"[url:value = 'http://140.237.44.234:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0855ec-7379-8ca3-c745-00009d994db6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/i","pattern":"[url:value = 'http://42.231.64.252:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9c90ae-eec8-2075-6f44-0000af68604e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/i","pattern":"[url:value = 'http://221.15.14.56:52752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5b2cd-1687-3682-6878-00006b929af3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/i","pattern":"[url:value = 'http://125.40.122.70:48495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c49e4caa-74c7-6be5-c575-00006be22396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/i","pattern":"[url:value = 'http://37.54.4.193:56949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5643e3-7ccb-3724-87d8-0000068ec34a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/bin.sh","pattern":"[url:value = 'http://42.231.64.252:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5151065-927a-c27b-9d7d-00009d75ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/i","pattern":"[url:value = 'http://124.161.116.2:53893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27335015-c171-1cd7-17f2-0000ebf01850","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/i","pattern":"[url:value = 'http://42.4.250.38:55169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8048fbd-d3ba-b9ad-5a06-0000828668c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/i","pattern":"[url:value = 'http://222.141.21.106:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16059879-7a98-6749-437c-000066a4e2fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.201.196:57604/bin.sh","pattern":"[url:value = 'http://110.38.201.196:57604/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fee6233-7dc5-75db-2b8e-0000c222d852","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/i","pattern":"[url:value = 'http://182.85.43.191:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0f37f26-f096-012f-a25c-000044a5b9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/bin.sh","pattern":"[url:value = 'http://27.207.229.26:38938/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ee9ad1-11bc-9cc8-a2a8-0000b421b727","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/i","pattern":"[url:value = 'http://74.127.168.68:33881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae95c9e-7e76-0144-4277-0000cc23981a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.94.20:34018/i","pattern":"[url:value = 'http://42.233.94.20:34018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5af90d5-88be-5ccc-74d9-0000481c86a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.34.242.96:52648/i","pattern":"[url:value = 'http://37.34.242.96:52648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744c5dea-46e6-e993-65ba-0000207c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/i","pattern":"[url:value = 'http://175.148.111.17:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f012ba7a-e49b-197c-bc7b-000040839fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/bin.sh","pattern":"[url:value = 'http://123.185.91.133:52353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--714c2b80-d3ca-2f93-690f-00001c59ae8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/i","pattern":"[url:value = 'http://27.156.139.177:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fa30-76d4-0f99-0865-0000a1f14d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/bin.sh","pattern":"[url:value = 'http://175.148.111.17:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0973c49b-9121-5fee-26f3-000063aa207a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/bin.sh","pattern":"[url:value = 'http://42.4.250.38:55169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce69cc0-15e6-6cae-484c-0000f1445189","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/bin.sh","pattern":"[url:value = 'http://163.142.77.145:55241/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6c02d-75e8-07ff-aed7-000030ac4118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/i","pattern":"[url:value = 'http://42.85.15.27:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92987675-b944-8280-a7ec-000021fd2a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/i","pattern":"[url:value = 'http://124.235.207.2:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a859b70-d19c-51fa-80bc-0000afe0091a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.159.141:53442/i","pattern":"[url:value = 'http://123.189.159.141:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc3ac03-cc35-30a2-ab24-0000f6ef9b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.196.33:49245/i","pattern":"[url:value = 'http://125.47.196.33:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e30d327b-a8f0-6aa7-e635-00003f13ea30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:40967/bin.sh","pattern":"[url:value = 'http://210.208.110.130:40967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313d10a2-eac4-8dcd-153f-00003c2092d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.219:54088/i","pattern":"[url:value = 'http://182.129.144.219:54088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0215cec-2521-39e5-523e-00000ee96ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.227.206.54:44703/i","pattern":"[url:value = 'http://42.227.206.54:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886801a4-d87e-d758-8795-0000707568b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/i","pattern":"[url:value = 'http://119.116.142.166:55362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51504dbb-1f0d-cc00-1d1e-000013c134b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/bin.sh","pattern":"[url:value = 'http://110.36.91.33:35795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d45077-883c-0e34-931d-00009ecd703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.239.253:51695/i","pattern":"[url:value = 'http://110.39.239.253:51695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a0ba7e-6773-1056-7967-000062e5e56f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.187.252.24:54389/i","pattern":"[url:value = 'http://60.187.252.24:54389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc50d4-7306-6bd5-f168-00004b281b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/i","pattern":"[url:value = 'http://110.37.44.119:37578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bba94-f672-4e21-c2fc-0000ca26ab67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/i","pattern":"[url:value = 'http://42.237.4.138:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321b5482-6797-ff19-3a6b-00004275dbce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/i","pattern":"[url:value = 'http://119.183.3.192:41382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74705f84-bcd8-100e-feff-00007f6cc621","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/i","pattern":"[url:value = 'http://42.179.125.40:42620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c69684b-7b9a-a8e2-cb45-000011f31ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.125:39910/i","pattern":"[url:value = 'http://120.84.214.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf1709f-c13a-3edc-43dc-0000e7bc01b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/i","pattern":"[url:value = 'http://115.52.194.55:43061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b78e0c-1a11-1701-899f-00000d692fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/i","pattern":"[url:value = 'http://116.2.53.55:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d8dd65-c7b8-0ccc-2b9e-000006f4adf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/bin.sh","pattern":"[url:value = 'http://37.54.4.193:56949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65571c7-47ba-f202-7a8f-00004db32841","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.184.12.198:38434/i","pattern":"[url:value = 'http://119.184.12.198:38434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2360b6-4830-2540-41ba-0000f23fdda6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/i","pattern":"[url:value = 'http://116.53.20.49:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddbb64c-e70d-a84d-6bf4-00002e683325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.133.4:35951/bin.sh","pattern":"[url:value = 'http://183.23.133.4:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aadb10-5f44-8518-c055-0000bc9fb0cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.149.40:50481/i","pattern":"[url:value = 'http://115.56.149.40:50481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8cdcd8-d3e7-ded6-becd-0000be6f64c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/i","pattern":"[url:value = 'http://221.1.247.58:51510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0819dc-a18f-8a7f-0457-0000e53ea82d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/i","pattern":"[url:value = 'http://196.189.35.226:40707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5648dd17-1024-0aad-ddb1-0000a18e82fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.121.20:34150/bin.sh","pattern":"[url:value = 'http://115.49.121.20:34150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4b6dd-723e-3285-8ce9-000012038d51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/bin.sh","pattern":"[url:value = 'http://110.37.44.119:37578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3115c51-9825-e6f0-9047-0000e5b63340","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/bin.sh","pattern":"[url:value = 'http://42.235.73.160:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537bf4a0-dcfd-fb81-6738-00009a099490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.94.194.151:60883/bin.sh","pattern":"[url:value = 'http://124.94.194.151:60883/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ec46d2-930f-e2d6-fb15-000075e4e2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/bin.sh","pattern":"[url:value = 'http://221.15.14.56:52752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a4e335-209f-4a5c-ce79-0000723ea5e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.94.94:33716/i","pattern":"[url:value = 'http://42.235.94.94:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c63b73-a37c-505c-9e10-0000ec741bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.22.216:55052/i","pattern":"[url:value = 'http://110.37.22.216:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4cbaa3-957b-c4e5-08da-00004e08ed93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.168.69.141/p1.sh","pattern":"[url:value = 'http://83.168.69.141/p1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17426656-3e9b-14fb-5cce-00003732fb26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.230.79.157:47435/bin.sh","pattern":"[url:value = 'http://115.230.79.157:47435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b42b6e2-12d3-17db-7713-0000745d6869","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:32939/i","pattern":"[url:value = 'http://200.115.102.246:32939/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d0b222-58f3-2962-60c0-00009f9fc907","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/bin.sh","pattern":"[url:value = 'http://196.190.105.170:60232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1694efb3-4db9-0442-39cd-00001deabd8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.95.26:40959/bin.sh","pattern":"[url:value = 'http://163.142.95.26:40959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f9d3d72-85c6-5cd7-906e-000047555ef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/i","pattern":"[url:value = 'http://123.185.91.133:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e5199ff-df5c-991a-48f7-0000f601211c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/i","pattern":"[url:value = 'http://182.240.11.199:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf8123a-612b-9ede-363b-000016182fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/i","pattern":"[url:value = 'http://113.239.64.220:36469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b8f358-2789-10e6-df02-00006cf2b3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.213.104:40820/bin.sh","pattern":"[url:value = 'http://182.126.213.104:40820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c966e0-926e-9546-5601-00008c8b23c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/i","pattern":"[url:value = 'http://36.70.226.107:53300/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626338d9-c560-84d2-eca7-0000b50ac76a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.197.32.42:36155/i","pattern":"[url:value = 'http://115.197.32.42:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a5ec21-ea89-1fc6-eae2-0000998e822f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/bin.sh","pattern":"[url:value = 'http://182.116.113.206:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91ef35c-d336-f57f-e084-0000544e1d9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.58.42.29:40746/bin.sh","pattern":"[url:value = 'http://59.58.42.29:40746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdbb74f-6d74-077a-0a78-00003535bc6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/bin.sh","pattern":"[url:value = 'http://60.21.174.229:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad626489-434c-54cf-e796-0000b8bfcbdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.78.61:33716/bin.sh","pattern":"[url:value = 'http://42.59.78.61:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627e454b-1271-9cf6-1cbe-0000b20ac096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/i","pattern":"[url:value = 'http://60.21.174.229:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bb9700-0a56-2cf3-a4ef-000096c533a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_ppc","pattern":"[url:value = 'http://62.60.249.165/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ba5237-ff1a-1e12-6357-0000766bd3ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/bin.sh","pattern":"[url:value = 'http://27.215.124.43:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef3ba3-5298-0750-9f35-0000234fb6a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/i","pattern":"[url:value = 'http://27.215.124.43:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159de90d-c9d8-2ed0-aaf3-0000fdac71b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:36140/bin.sh","pattern":"[url:value = 'http://95.9.35.137:36140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38663ca-ccd7-e288-29bd-0000224548ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/bin.sh","pattern":"[url:value = 'http://59.97.254.10:40659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec5c48c-e37c-34f3-ab3a-000058c183d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:60655/i","pattern":"[url:value = 'http://36.88.136.194:60655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb292cb-5549-4cc3-d1e1-00000f940689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/i","pattern":"[url:value = 'http://59.97.254.10:40659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0edcd9-ed02-0ae8-f579-0000bc1becb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/bin.sh","pattern":"[url:value = 'http://61.53.1.186:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753fe9bb-8991-02ff-42a5-000004a731b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/bin.sh","pattern":"[url:value = 'http://182.115.232.200:58187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--380904f4-7645-feb3-d0a9-00005b0be33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/i","pattern":"[url:value = 'http://61.53.1.186:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def3113b-4b05-c87e-c0b1-0000ab25cfb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/i","pattern":"[url:value = 'http://105.184.72.21:54289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac5b9f1-184e-afee-ceae-00009e797f0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.156.143:47860/i","pattern":"[url:value = 'http://123.132.156.143:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9869c966-be88-ef1c-b04a-0000967a475f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/i","pattern":"[url:value = 'http://182.115.232.200:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ae2b543-adc3-6729-2f11-0000511cafa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/bin.sh","pattern":"[url:value = 'http://98.36.141.73:43074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a1e913-9106-f026-3862-0000c47b83ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.187.252.24:54389/bin.sh","pattern":"[url:value = 'http://60.187.252.24:54389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e07aaa-b11b-29a4-ee07-00005543ee9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/i","pattern":"[url:value = 'http://98.36.141.73:43074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--344d7c0c-66ac-92b6-0056-0000768bb729","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/bin.sh","pattern":"[url:value = 'http://115.57.228.213:55432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7082afca-c38e-f558-28b0-000042671462","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/i","pattern":"[url:value = 'http://222.142.222.21:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144358a-995b-160e-5e43-0000cb549c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/bin.sh","pattern":"[url:value = 'http://182.117.131.145:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ed7bb65-24c4-f085-0be1-0000a5ec7c1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/i","pattern":"[url:value = 'http://115.57.228.213:55432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5257267-507f-2d27-e06d-0000efe3579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/i","pattern":"[url:value = 'http://182.117.131.145:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--385e945f-b020-e18b-580d-00000a681ff6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/bin.sh","pattern":"[url:value = 'http://182.117.30.230:43216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9594d047-22fd-9cf7-c720-0000f7f94c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/bin.sh","pattern":"[url:value = 'http://110.36.1.200:60120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d65fa4-873c-f5ec-b7fb-0000789486e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/i","pattern":"[url:value = 'http://115.55.10.187:42654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44537ca1-a048-7ca4-76d3-00005d244409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131d8f9f-5a37-f210-137d-0000dd24522d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f581d065-db3e-a7cb-4e5b-0000a1ed3a39","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c4f5c-a5b4-a6c9-a8f0-0000f2309dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/Mozi.a","pattern":"[url:value = 'http://218.0.112.226:51471/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528c4962-840d-ceb0-5edc-00007a9061f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856c2f59-9791-c9bd-2fce-0000c103450a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/loader.sh","pattern":"[url:value = 'http://103.77.246.150/loader.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01f4bbd-ff75-9940-f913-0000a775b306","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3589e251-a181-faa9-3c32-00006124abf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.krypton-client.net/assets/krypton-free.jar","pattern":"[url:value = 'https://www.krypton-client.net/assets/krypton-free.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3da7160-b48a-7805-029b-0000ec83fd20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar","pattern":"[url:value = 'https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae0307c5-4245-83ef-4073-0000b55ad6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6634c1-329e-6afc-2150-00007be08e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.127.232.94:58633/Mozi.m","pattern":"[url:value = 'http://111.127.232.94:58633/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914319d2-b4d9-905c-c51e-00000eae1d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/Mozi.a","pattern":"[url:value = 'http://105.186.143.37:55447/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6024f026-b349-e49e-9ae7-0000e0097af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6335dc6b-2061-74a3-0eae-0000cbca2f3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/cat.sh","pattern":"[url:value = 'http://77.239.124.108/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ec555e-83ed-c2ef-ee10-0000fc244181","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47cdca74-bcb3-153a-871d-0000734e04ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/bin.sh","pattern":"[url:value = 'http://110.37.5.157:44447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8357a5bb-43bf-4fc3-e085-00001b02d827","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.30.151:34327/i","pattern":"[url:value = 'http://115.49.30.151:34327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c41ca4-2deb-b68f-5f34-00005079eb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/bin.sh","pattern":"[url:value = 'http://219.157.243.71:34099/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60d056c-0db2-e842-7b7f-0000b67dffa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/i","pattern":"[url:value = 'http://110.37.5.157:44447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf65246-75a9-dbcf-0af2-00005c32dc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/i","pattern":"[url:value = 'http://182.117.30.230:43216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02b7e1a-2ec6-bf7a-2096-0000f8c7cef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/i","pattern":"[url:value = 'http://219.157.243.71:34099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e5211e-ea5a-98f1-3559-0000be31c8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/bin.sh","pattern":"[url:value = 'http://196.190.224.62:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7836a55c-6963-7dbd-6546-00008d1a4f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/bin.sh","pattern":"[url:value = 'http://110.36.72.182:41495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f4fbb6-23dc-42e1-8d92-0000783dc956","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/bin.sh","pattern":"[url:value = 'http://59.96.138.90:37638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2dc968-8c3b-a799-c515-0000ed55ef0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/i","pattern":"[url:value = 'http://196.190.224.62:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb15362-25b9-978e-c668-000092d5d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/gfg.sh","pattern":"[url:value = 'http://62.60.249.165/gfg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c25923-06bb-959a-ff7a-0000d06ef867","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm5","pattern":"[url:value = 'http://62.60.249.165/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87981665-35dd-fce7-c450-00005826e243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_m68k","pattern":"[url:value = 'http://62.60.249.165/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9d18427-ce54-9016-b8f7-0000674faa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/scanner","pattern":"[url:value = 'http://62.60.249.165/scanner']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcc380f-7585-061b-5185-00007a6730ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm7","pattern":"[url:value = 'http://62.60.249.165/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68cb0899-eb8f-10ec-9f14-0000c2db5789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm6","pattern":"[url:value = 'http://62.60.249.165/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a768d01-ca47-7799-435d-0000c2ff1dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/pandora.x86_64","pattern":"[url:value = 'http://2.26.81.46/pandora.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a1d836-2876-d54a-46eb-00003ca00032","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/i","pattern":"[url:value = 'http://42.239.179.192:41888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2688cff4-0489-df0d-3b20-0000e9ba5e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/i","pattern":"[url:value = 'http://59.96.138.90:37638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fae566d-71b2-0fd0-44ae-000069f6699f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.127.19:51010/i","pattern":"[url:value = 'http://115.49.127.19:51010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1800d4d-1f03-b09e-197c-0000d422a681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.186.227:47974/i","pattern":"[url:value = 'http://42.231.186.227:47974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dd9e16-481c-41c0-6ae4-0000fb7d93e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/bin.sh","pattern":"[url:value = 'http://200.115.102.2:47663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f547103e-1f57-e0bd-764c-000078f94ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/bin.sh","pattern":"[url:value = 'http://125.45.64.24:42706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063db189-325f-36b4-f6b1-0000bf24b64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/i","pattern":"[url:value = 'http://125.45.64.24:42706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2f28fc-0d3a-2b95-6001-0000be245cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/bin.sh","pattern":"[url:value = 'http://115.50.101.188:34800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a70ea3-17f3-77a3-bce1-0000f979bdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/i","pattern":"[url:value = 'http://113.221.8.44:56847/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baece3-18f3-641f-f50e-000086adcdd1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/bin.sh","pattern":"[url:value = 'http://125.110.49.243:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cc01a-b103-cf3c-95bf-00001ce5d817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/i","pattern":"[url:value = 'http://115.50.101.188:34800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c8adc0-11a1-d044-e4ce-0000ebcf5b7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/i","pattern":"[url:value = 'http://125.110.49.243:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfcf94c-a5e0-e738-5223-0000fc83d585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/i","pattern":"[url:value = 'http://1.58.182.84:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae7f9a0-321e-81b4-52eb-0000d61e356b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/bin.sh","pattern":"[url:value = 'http://182.121.82.149:47697/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92dbdab0-cfc0-47c0-dd27-00005bfe9de5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.38.188:51859/bin.sh","pattern":"[url:value = 'http://115.51.38.188:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496383ad-eef7-adc7-3601-0000e1c370be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/i","pattern":"[url:value = 'http://182.121.82.149:47697/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f18da8-79a4-a0fb-323d-0000678a6de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.159:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e2ec56-f07a-5515-acc3-00002088283c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.159.139.237:45921/bin.sh","pattern":"[url:value = 'http://46.159.139.237:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29605262-f61c-1eca-ee23-00007a1a0447","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/i","pattern":"[url:value = 'http://182.121.231.159:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb91add-63cb-af5f-47a6-000073b712c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.66.196:56771/i","pattern":"[url:value = 'http://175.174.66.196:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b249ff0-b311-a9e2-08f5-00008b684471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/bin.sh","pattern":"[url:value = 'http://156.146.24.110:48908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea65ea02-891d-6bdd-9767-00006ebb1f9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/bin.sh","pattern":"[url:value = 'http://39.90.150.62:51319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd1722e-0b93-014b-36d7-00002a78d76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.118.104:55662/bin.sh","pattern":"[url:value = 'http://182.116.118.104:55662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833ab1b6-668b-f1a8-d024-00000e7781c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/bin.sh","pattern":"[url:value = 'http://123.10.155.173:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64fba365-98a2-ef06-b349-0000152f88bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/bin.sh","pattern":"[url:value = 'http://196.189.68.239:58818/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c898fc30-78a1-b618-dae6-000096c01531","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/i","pattern":"[url:value = 'http://156.146.24.110:48908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--672f6326-0627-56f3-8e36-00002db77aa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.223.172:43584/i","pattern":"[url:value = 'http://110.38.223.172:43584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89987a17-a56f-736c-e13f-0000c61b7ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/bin.sh","pattern":"[url:value = 'http://110.37.61.166:60696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d354151b-f8de-56f7-6421-0000bfb67a15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/bin.sh","pattern":"[url:value = 'http://182.124.119.64:56849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e8c1a06-6a56-66e2-ef6d-0000a4d80c92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/i","pattern":"[url:value = 'http://39.90.150.62:51319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4647bad1-faf3-c140-2f8e-00008eaf88ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/i","pattern":"[url:value = 'http://123.10.155.173:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc24cc34-7a03-ec5e-6a84-00008c5874cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/i","pattern":"[url:value = 'http://110.37.61.166:60696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75688d70-adba-312a-ac6f-00006dc322e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/i","pattern":"[url:value = 'http://196.189.68.239:58818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824a684-9dea-74af-a2ef-0000d6140904","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.40.110:37931/i","pattern":"[url:value = 'http://221.14.40.110:37931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7d5d86-b0ba-39c2-d4f4-0000306f0cbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/i","pattern":"[url:value = 'http://182.124.119.64:56849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c39af0e-bb8a-ecc2-71db-000088724006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/bin.sh","pattern":"[url:value = 'http://222.127.53.189:49946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fef49df-fad5-da8e-9506-000063ad3c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/bin.sh","pattern":"[url:value = 'http://125.40.122.70:48495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54e351f-b43c-b8bd-1b12-0000d0590f77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/bin.sh","pattern":"[url:value = 'http://119.116.88.117:40271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d91e4219-d93a-20ce-cf10-0000dfc1cd6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/i","pattern":"[url:value = 'http://222.127.53.189:49946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad87e6d7-7e52-7c54-9bd4-00000748245f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.247:53078/i","pattern":"[url:value = 'http://110.186.231.247:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e164047-3082-2133-d3b8-0000850e24f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.124.137:52075/i","pattern":"[url:value = 'http://61.53.124.137:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb9ff2-37d2-cd5e-8e12-000083374ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/i","pattern":"[url:value = 'http://175.146.231.101:47081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61fc4fc-5fea-9292-b0bd-00006a36d003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.38.162:51120/i","pattern":"[url:value = 'http://222.139.38.162:51120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f0f8cc-4163-58d3-a4b9-00000d1bb3bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/i","pattern":"[url:value = 'http://115.63.203.149:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63abdbbb-947f-7a85-922d-00001eb53288","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7782139129/Tz2SZvL.exe","pattern":"[url:value = 'http://62.60.226.140/files/7782139129/Tz2SZvL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c636e713-24d7-66b6-06f6-00003493a8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.159.154.179:36339/i","pattern":"[url:value = 'http://27.159.154.179:36339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aefbfad-f14f-c582-4ed1-0000763ec679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.24.217.164:45145/bin.sh","pattern":"[url:value = 'http://117.24.217.164:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6674e6a7-bdcc-e58c-5e0e-0000770def62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/i","pattern":"[url:value = 'http://112.228.4.224:58279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b99314-c6bc-fa42-c202-000007889cb4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/bin.sh","pattern":"[url:value = 'http://222.138.150.155:55809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72345d8-12fd-37db-a90e-00005885ebf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/bin.sh","pattern":"[url:value = 'http://108.170.136.155:37224/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6e3aad-2176-7af3-d475-0000aa7519e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/i","pattern":"[url:value = 'http://39.78.26.151:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c864874-f9a4-d53f-1c00-00009bf566b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/bin.sh","pattern":"[url:value = 'http://42.239.152.98:57265/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aceedf8e-c963-8feb-d39a-00005ecf6527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/i","pattern":"[url:value = 'http://222.138.150.155:55809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--468bfc83-d9b2-9b86-eefc-0000d5661428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/i","pattern":"[url:value = 'http://108.170.136.155:37224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a00a2d-f09c-52e3-4cc0-0000e8dadb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/i","pattern":"[url:value = 'http://42.239.152.98:57265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7da6ba8-8c37-40e9-7bef-0000c312c017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/bin.sh","pattern":"[url:value = 'http://112.228.4.224:58279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e30f3-2c1f-c56c-928e-00001061c278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/i","pattern":"[url:value = 'http://182.112.13.24:36195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc62cef-c106-e2ab-49dd-00001dfede47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/bin.sh","pattern":"[url:value = 'http://59.97.249.15:59820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b52e8c4-e31b-d8d4-b28d-000071123215","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/i","pattern":"[url:value = 'http://59.97.249.15:59820/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5813af9-6cdc-135b-8678-0000f17560cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/bin.sh","pattern":"[url:value = 'http://42.179.238.52:48748/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1930b0e-3066-369c-2f6a-0000741a7350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/bin.sh","pattern":"[url:value = 'http://72.255.30.244:42024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a625143-c23d-013a-1dd9-000086b61a7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/bin.sh","pattern":"[url:value = 'http://123.133.101.151:58126/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df3ab0e-4418-37b6-1a45-000097afae4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/dp.sh","pattern":"[url:value = 'http://191.44.112.89:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2929244-c6ca-fa6c-b315-0000de937ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x86","pattern":"[url:value = 'http://191.44.112.89:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1336063e-54f6-c42f-9989-00004363bf38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc440","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c687d3b9-bc91-849a-6249-0000e73000a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mips","pattern":"[url:value = 'http://191.44.112.89:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f8f993-8d82-97da-909d-00007d3b63b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm6","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf1a829-077e-3bcd-ba6e-00006f8ecc56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm5","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7241dd-e235-5b3e-3042-0000264e8d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sh4","pattern":"[url:value = 'http://191.44.112.89:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1397891f-f920-f28e-4bec-000067268415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i486","pattern":"[url:value = 'http://191.44.112.89:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ffc905-cc0c-34b6-4698-0000c58704dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm7","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf698bf-2736-7f24-67e2-0000d732ab33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm4","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--378af076-e16e-a9ee-156d-0000bddbdaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mipsel","pattern":"[url:value = 'http://191.44.112.89:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f20a38a-f34f-1569-6dd2-0000a6901495","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21fdee6-ec45-5aff-3b2c-0000cbaa0c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x64","pattern":"[url:value = 'http://191.44.112.89:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10135d71-0b7d-7ab6-3e66-00002aee251e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i686","pattern":"[url:value = 'http://191.44.112.89:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aabe76f-cad4-224c-94aa-0000e7c6d672","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.m68k","pattern":"[url:value = 'http://191.44.112.89:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42fc9a64-4dd0-f736-a4ef-0000840dfab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sparc","pattern":"[url:value = 'http://191.44.112.89:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5ab6bb-a44e-fa52-f8db-0000045ce5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/bin.sh","pattern":"[url:value = 'http://183.188.204.211:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9fe53e-8cb9-d7af-80b3-0000993a0475","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/i","pattern":"[url:value = 'http://42.179.238.52:48748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--221248f2-079a-725f-efe1-0000892f5677","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/JutrvoService.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/JutrvoService.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e45969ca-8c08-e9e2-071a-0000cec66f62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/i","pattern":"[url:value = 'http://123.133.101.151:58126/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69231027-79f7-ecbf-c87b-000021d17681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/i","pattern":"[url:value = 'http://183.188.204.211:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f588313-2996-8e62-928f-00009f084a96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.100.231:50864/bin.sh","pattern":"[url:value = 'http://27.37.100.231:50864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e8e993-ab5a-7e9b-4bda-00002a4e61a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/bin.sh","pattern":"[url:value = 'http://115.55.114.89:40814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d59f910-a96f-1955-342b-00003f995547","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:54748/i","pattern":"[url:value = 'http://110.36.86.83:54748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ace7db-8762-6866-f03a-0000bbf515a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.30:42974/i","pattern":"[url:value = 'http://59.96.142.30:42974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3339e01e-4da3-6082-7517-0000e3b5b003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/i","pattern":"[url:value = 'http://115.55.114.89:40814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d235a3db-2bf2-f7a6-d51d-0000a633b4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/bin.sh","pattern":"[url:value = 'http://116.248.123.33:49271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faca328f-7bbd-fcc8-87e8-000088de6636","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.104:47860/i","pattern":"[url:value = 'http://112.242.56.104:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360bbd8f-4708-7163-a373-0000d8a61058","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/bin.sh","pattern":"[url:value = 'http://124.131.148.213:44472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7739dac5-232f-02d5-add4-000047c0b4ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/i","pattern":"[url:value = 'http://119.116.88.117:40271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61767ce7-c590-cff4-5435-000062376119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/bin.sh","pattern":"[url:value = 'http://42.224.248.160:54570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70aaf821-676a-bd47-0cbe-0000279f484a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/i","pattern":"[url:value = 'http://116.248.123.33:49271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c6080a-d4b7-bf6b-780d-0000433f2da5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/i","pattern":"[url:value = 'http://124.131.148.213:44472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63f8a4-772d-84af-7bf8-000022d9eb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/i","pattern":"[url:value = 'http://222.137.19.202:54735/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--855efb82-f499-95de-b544-00006d5cce40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.239.201:47209/i","pattern":"[url:value = 'http://123.12.239.201:47209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d6037b1-ca20-61e1-f38f-0000ed5f10f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/i","pattern":"[url:value = 'http://42.224.248.160:54570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60370ee7-49e8-81d5-b748-00007ee50b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/bin.sh","pattern":"[url:value = 'http://42.239.188.2:43535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56104ee3-03be-3635-7ac0-00002c9f59ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/i","pattern":"[url:value = 'http://115.52.190.59:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d3d4bf1-14f1-f271-9d41-00000b9586bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/bin.sh","pattern":"[url:value = 'http://112.198.193.5:33801/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6321193-0a89-0f4d-3ed4-0000902d3171","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad4faec-0ab6-e4d7-46ec-00003b63733a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cca54e-b68e-c9e2-c866-0000cfd02396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/bin/support.client.exe","pattern":"[url:value = 'http://77.83.39.9/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f702dc6-6813-ada9-635b-0000117b84e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.142/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f9af0e-acb5-7b2d-0bf7-00001316823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9611308f-5721-e2e2-a8ce-0000abe90f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39018ba-2342-9d0f-f7f6-00004eab35a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--155b2292-706f-6f63-98a0-000051eae779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/i","pattern":"[url:value = 'http://42.239.188.2:43535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319e3f42-0aba-160c-dda9-0000c801884e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/i","pattern":"[url:value = 'http://112.198.193.5:33801/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17770e1-4606-a8f6-577f-0000bd0862e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/i","pattern":"[url:value = 'http://182.118.246.94:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543701ab-3b6d-878a-4ffd-000080fd6335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/bin.sh","pattern":"[url:value = 'http://112.239.122.112:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e9c8-641a-ccd8-2115-0000b61e283e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.43.152:53485/i","pattern":"[url:value = 'http://182.113.43.152:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60e58e-a5c9-0ce0-88bf-00007166159b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/bin.sh","pattern":"[url:value = 'http://222.138.182.37:37037/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ac8c76-4240-0c5a-084b-0000ec5c69ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/i","pattern":"[url:value = 'http://112.239.122.112:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6159c63-3a96-81b8-010e-00000ece118c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.238/s.ps1","pattern":"[url:value = 'http://94.154.32.238/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dc707b-73ff-3c8c-91ea-00000c8825d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online/asset/update.dat","pattern":"[url:value = 'http://newstan.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6847d0-d3d6-1df3-7d47-000085ae40e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://171.213.150.35:35745/i","pattern":"[url:value = 'http://171.213.150.35:35745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7820b6-4b72-bb7d-54c5-0000feff1aea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.161:44359/i","pattern":"[url:value = 'http://182.114.255.161:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a101cc-7733-feab-a849-0000d40988f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/i","pattern":"[url:value = 'http://222.138.182.37:37037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd86a203-1a68-f650-581e-00006eda0374","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/bin.sh","pattern":"[url:value = 'http://221.202.206.125:41411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1922b7-c18b-ab2c-143f-0000f7be43e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/bin.sh","pattern":"[url:value = 'http://115.55.130.218:47315/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dae89c3-3adb-fa9e-d404-0000bcb0c0c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/bin.sh","pattern":"[url:value = 'http://114.227.49.3:38196/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec032b81-ae1d-67c6-b52a-0000fbf89826","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/i","pattern":"[url:value = 'http://114.227.49.3:38196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f99478-bb3c-7d15-1c3a-00007fd879f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/bin.sh","pattern":"[url:value = 'http://125.44.181.178:58549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35528b31-3f6f-cb58-22a4-00008ccdbb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/i","pattern":"[url:value = 'http://221.202.206.125:41411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782d68e4-0744-53d9-caa1-0000b2668070","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/bin.sh","pattern":"[url:value = 'http://218.91.14.121:32924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0b0b44-61fc-e0cd-66d9-0000f7c3600a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/i","pattern":"[url:value = 'http://125.44.181.178:58549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f36b7b9d-6518-2a88-5fc7-000017167613","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/i","pattern":"[url:value = 'http://218.91.14.121:32924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccbc1a2-0ff0-b4eb-1b29-0000f0dd319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/i","pattern":"[url:value = 'http://116.140.186.83:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366ff72c-dcdc-176b-4eb8-000043d1f1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/i","pattern":"[url:value = 'http://42.59.204.16:37885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81cc137-9be4-5f4a-7c0c-000013b20c23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.184.118:41931/i","pattern":"[url:value = 'http://119.165.184.118:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60848353-e783-9cfd-be42-000060f75996","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.127:40959/i","pattern":"[url:value = 'http://120.84.214.127:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4322f164-abd9-d6e7-0cb5-0000636fb709","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/bin.sh","pattern":"[url:value = 'http://123.188.223.103:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184b38eb-ae52-d062-eb20-0000a7505e14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.223:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f4cac8-ffac-f314-d9a4-0000e00f8b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/bin.sh","pattern":"[url:value = 'http://218.29.28.21:33666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6481f14-1edb-cbe8-19f1-00005a048998","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.25.33:32877/i","pattern":"[url:value = 'http://110.36.25.33:32877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b327f6-e12a-157f-ba36-0000cd921ad6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/bin.sh","pattern":"[url:value = 'http://222.139.69.87:33578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8aab24c-7c8b-e076-af6a-00006d06b76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/i","pattern":"[url:value = 'http://125.42.65.22:32872/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7fd3c57-54dc-dddf-0665-00002d7a8a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0851d22-4288-93a1-7c21-0000ad01cc33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d47a7b4e-2396-dbfa-d412-0000f269ddaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload.exe","pattern":"[url:value = 'http://newstan.online:8443/payload.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8816d7-fd4f-e3db-d899-0000834bd874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1db98da-ff5f-1246-9f4e-0000dcf1fef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4bd89774939d.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4bd89774939d.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e308c965-9ae4-3669-a431-0000ae89a8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4b870df50ce6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4b870df50ce6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140a958-1748-12d2-7006-00009fc07cb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux.exe","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ef1ce9-dbda-56e7-2b2c-000084870ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db7d9cbf-d4e9-9be6-d8cf-0000c93434cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7182b6e8e7b6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7182b6e8e7b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae4ae7e-c813-1ded-fc27-00003dfab738","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9cea2d96337e.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9cea2d96337e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928868d-384e-609d-ac3d-000045f75a03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7333cef1df5b.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7333cef1df5b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6872fe71-0028-77c8-e629-000095719b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7296bb21486f.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7296bb21486f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda619a0-2023-30ee-83e2-000089bbb7c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7441f57b1a78.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7441f57b1a78.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3fd13f-b188-b5ea-09f1-0000f5043e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9c2f86cabdb2.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9c2f86cabdb2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0c3a24-94fa-37bd-298d-0000e72d391b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7a9ae6f1d608.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7a9ae6f1d608.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e8ca8e-abeb-f82a-1130-00008019269f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb73a84c0c2684.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb73a84c0c2684.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b7de9d-6a00-5bfa-f664-00004b03a075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7296bb21486f.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7296bb21486f.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd25f24f-6b78-6414-0eb2-0000e23ed8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cef6566cc70.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cef6566cc70.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc741b51-12d5-dc35-fbc5-000067567f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7ca62cfb04e6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7ca62cfb04e6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c4ed10-b2ed-3082-e757-00009f896da7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80faf1d3-998d-da9d-1159-00002b7605b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2dea62-3699-b54d-75ba-00005e6b1d68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb73a84c0c2684.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb73a84c0c2684.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b8bc53-6d58-f999-2aea-000017460f38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d615a80d-efa6-454d-72dd-0000f7ad0421","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb9cea2d96337e.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb9cea2d96337e.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2ad36a-4d73-f65a-12ed-0000c0985409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d062cca7589.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d062cca7589.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363394c-1730-52d3-cc63-000057c98c31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7441f57b1a78.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7441f57b1a78.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa49ecc-f344-d5e0-3de1-000052baea50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7eda661-a77c-4f51-1a95-00009b8561f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7333cef1df5b.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7333cef1df5b.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07db468-933d-8f18-329c-00001cafb9fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb72c503457787.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb72c503457787.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb89484-c3da-5bb7-09c6-0000c2dd820c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb72c503457787.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb72c503457787.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd20b8-5e2e-3b72-2fba-00001f6f01b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/i","pattern":"[url:value = 'http://175.107.209.223:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f7387e-3b3e-1288-33cb-00009e5fdbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d98c1e-6d26-58e3-7bc4-00008af77695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/i","pattern":"[url:value = 'http://218.29.28.21:33666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea00095-c801-377b-f7b4-0000d9789c83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/i","pattern":"[url:value = 'http://222.139.69.87:33578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eab563e-f0bd-7fdf-6c85-000077660d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.32/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e378ad53-ead7-85b9-c8ed-0000dffbee0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7441fd07-cbd9-cfb8-ff6b-000051f0bda9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.37.245:40790/i","pattern":"[url:value = 'http://113.221.37.245:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9cb079-1c11-33e2-d64f-0000b22a674a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==","pattern":"[url:value = 'https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb6d4a5-5d28-3e3e-2659-0000ec93cc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.10.7:39430/i","pattern":"[url:value = 'http://123.11.10.7:39430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55fef21-bf1c-d9fb-16ed-0000efcbcaca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.127:51731/i","pattern":"[url:value = 'http://115.57.233.127:51731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312341f3-6cbb-cafb-2a43-000008f18720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/i","pattern":"[url:value = 'http://46.236.65.23:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1ca74f-d497-5809-a672-00007af7f9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/bin.sh","pattern":"[url:value = 'http://42.237.4.138:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb57556-a309-6530-d838-00007504ddf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/bin.sh","pattern":"[url:value = 'http://222.142.222.21:33146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd20d7b-2a1b-7a5f-65bd-000071a10f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/i","pattern":"[url:value = 'http://182.113.202.0:42578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df95a2c3-1e93-86ed-2114-00007bcbd4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/i","pattern":"[url:value = 'http://83.219.1.198:51018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72eef1c4-afb2-56d7-d5ed-000028c564c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/bin.sh","pattern":"[url:value = 'http://115.52.190.59:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887ae7b9-a1fc-2dec-1bba-00009f167db0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/i","pattern":"[url:value = 'http://203.2.151.15:42459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb4da69-84ab-0dba-619e-000004abeffd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/bin.sh","pattern":"[url:value = 'http://120.28.194.92:40193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fcd0b9-7da8-e163-49a5-00000bcafb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/bin.sh","pattern":"[url:value = 'http://46.236.65.23:41753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddb539e-37f5-be4a-a99d-0000836cd5a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/i","pattern":"[url:value = 'http://77.236.74.65:48279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd4a83bd-b851-4789-3dfd-0000bf574b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/i","pattern":"[url:value = 'http://222.138.114.112:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddb19ef-92eb-faf9-ece4-0000dcc9703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.137.250.247:56159/bin.sh","pattern":"[url:value = 'http://38.137.250.247:56159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48de9e99-6cc4-6159-1725-0000881d9ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/i","pattern":"[url:value = 'http://42.87.221.249:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a9bade-8b63-84d3-f8fd-0000c2410039","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/i","pattern":"[url:value = 'http://103.179.240.227:36804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649b3a2e-2b7b-9b89-444d-000084d1ba95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/i","pattern":"[url:value = 'http://103.80.57.126:60997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3c7a1e-9857-88cf-b315-000018712693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/i","pattern":"[url:value = 'http://46.236.65.163:51558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72494f78-c4af-bdac-4bc0-0000d675d6ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/bin.sh","pattern":"[url:value = 'http://193.163.187.213:45749/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8406fe-9647-6060-edfd-0000f7a3fba5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.79.142:44907/i","pattern":"[url:value = 'http://42.226.79.142:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ff6878-6d2c-44d1-321b-00002eb27280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/bin.sh","pattern":"[url:value = 'http://115.49.73.86:41886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f03266d-e456-d2c4-ee56-0000eeaecf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/bin.sh","pattern":"[url:value = 'http://222.185.199.96:32826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf04e17a-e9c9-6549-c497-0000ed18ae23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/i","pattern":"[url:value = 'http://123.5.153.69:57210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446c759f-77b7-d242-1483-000014751ae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/i","pattern":"[url:value = 'http://182.124.162.58:48222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--795c24eb-dc5d-fc69-9560-0000c2f486ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/i","pattern":"[url:value = 'http://115.49.150.183:34026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9d06dc-1d6b-d56d-70ce-0000a801c1ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/i","pattern":"[url:value = 'http://61.53.205.176:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16de9fac-a71b-465f-80f0-0000b3a688ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/i","pattern":"[url:value = 'http://110.39.227.44:34974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b0ab10-3406-7e9e-0a37-00006ec230f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/i","pattern":"[url:value = 'http://39.73.126.17:41462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd17a434-ecdc-0aef-bb6e-00009eacf405","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/i","pattern":"[url:value = 'http://42.59.237.57:55244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a917743e-3716-19d5-ecb6-00001203b4a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/i","pattern":"[url:value = 'http://42.59.235.112:57254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82744e02-b6b5-fb81-fc76-0000ce6046ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/bin.sh","pattern":"[url:value = 'http://222.138.114.112:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65537ac6-2fa0-a367-331c-000046e63e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.9.103:49699/i","pattern":"[url:value = 'http://221.15.9.103:49699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842ceb68-8192-01a8-9e98-00003de09976","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/i","pattern":"[url:value = 'http://61.52.14.231:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50122219-8196-b526-0c79-0000b38aea69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/bin.sh","pattern":"[url:value = 'http://61.52.14.231:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08fccc19-ec63-b57f-6e26-000034c5fb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.228.213:50246/i","pattern":"[url:value = 'http://125.41.228.213:50246/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d232fe3f-cf7e-916f-b776-000099a97a62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.17.30:34226/i","pattern":"[url:value = 'http://115.194.17.30:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda53341-16f5-bac4-59a8-0000d7f990b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/i","pattern":"[url:value = 'http://101.109.201.128:44332/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16455950-f327-dd0e-c58c-0000f505380a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/i","pattern":"[url:value = 'http://193.163.187.213:45749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2239da29-bca1-709b-59d8-0000e7389d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/bin.sh","pattern":"[url:value = 'http://83.219.1.198:51018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0edfe769-3052-cbe8-08d1-0000b4231f61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/bin.sh","pattern":"[url:value = 'http://125.42.65.22:32872/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88f1d8-761c-53e8-cec9-00009928fa16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.240:49683/i","pattern":"[url:value = 'http://115.55.130.240:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba13dbaf-60fe-e994-c3c4-0000c0200243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/i","pattern":"[url:value = 'http://115.50.224.108:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4303eef3-6535-431a-16ac-00001a0007bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/bin.sh","pattern":"[url:value = 'http://39.73.126.17:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca2c9135-1cb3-0a4e-9a23-00008c54b5a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/bin.sh","pattern":"[url:value = 'http://77.236.74.65:48279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5638541-8949-65ce-9802-00001761fe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/i","pattern":"[url:value = 'http://115.58.88.232:50270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c216beb8-1e97-f49b-d55b-0000b1a9dca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/bin.sh","pattern":"[url:value = 'http://113.221.8.44:56847/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ccd98a-9dbb-074e-2645-0000dafc2bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/bin.sh","pattern":"[url:value = 'http://175.149.219.183:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--576b0b2b-69ef-c16f-0e74-0000f9fa8de3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/i","pattern":"[url:value = 'http://125.41.247.59:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a75001c-d8f9-63a5-a3c5-0000c1259a23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/i","pattern":"[url:value = 'http://124.131.128.79:53693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac0be52-a605-3257-5272-00007a6cfe3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/i","pattern":"[url:value = 'http://27.37.229.199:49596/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed854d-5d4d-96a7-b971-0000147ba914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/bin.sh","pattern":"[url:value = 'http://123.161.90.29:49111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d062cb40-11a9-8436-0906-00000f5ec64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/bin.sh","pattern":"[url:value = 'http://27.215.84.16:59065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0650de63-2211-b516-e8e1-0000ca3789b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/i","pattern":"[url:value = 'http://42.85.169.225:40832/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2795474d-b500-70c4-2c16-0000b369e513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/bin.sh","pattern":"[url:value = 'http://110.36.86.0:40490/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ded14ef-15f4-7a8d-8e31-0000a6dd9bfe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/bin.sh","pattern":"[url:value = 'http://110.39.227.44:34974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae20a592-6432-e17b-db26-0000e2ff41fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/bin.sh","pattern":"[url:value = 'http://103.179.240.227:36804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dff79ae-8149-0e4e-1966-0000f46f187b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/i","pattern":"[url:value = 'http://222.185.199.96:32826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--081645bc-8f72-df7c-143f-000041e84cc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/i","pattern":"[url:value = 'http://115.55.130.218:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fe57a3-ad53-6937-46bb-000080b7b28a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/bin.sh","pattern":"[url:value = 'http://115.50.224.108:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89c9dfa5-0838-088b-ff24-0000cfdd7968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/bin.sh","pattern":"[url:value = 'http://103.249.199.3:36611/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed72677-4ecd-8b40-e5f3-00007ea1ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/bin.sh","pattern":"[url:value = 'http://124.131.128.79:53693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73991ded-2b16-a87d-2842-000023f341d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/bin.sh","pattern":"[url:value = 'http://42.86.137.34:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa631fcc-d2d8-8123-1fd7-00007522140c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/i","pattern":"[url:value = 'http://219.155.73.196:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73acf7e6-431e-516b-a659-0000dd847176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/Mozi.m","pattern":"[url:value = 'http://175.174.68.59:47203/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87264a75-218e-49b0-8130-00007ed7cde0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/bin.sh","pattern":"[url:value = 'http://103.80.57.126:60997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5858ab08-358f-84ee-aae1-0000d226a8aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/i","pattern":"[url:value = 'http://182.126.84.239:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531e81a8-5c8f-49ec-d0e9-0000fb8add4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/bin.sh","pattern":"[url:value = 'http://175.149.88.173:35767/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc6b441-9c53-3cc1-da30-00007780ae7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.138:40709/i","pattern":"[url:value = 'http://182.114.192.138:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9c26510-8076-1805-dc51-000085b0da09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.94:60512/bin.sh","pattern":"[url:value = 'http://27.37.102.94:60512/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fda7ca4-4adc-a74c-a089-0000cf8bbd3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/i","pattern":"[url:value = 'http://27.37.102.10:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5d44ec-1b09-71f8-179d-0000d541cb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/i","pattern":"[url:value = 'http://123.11.72.175:34884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152d3c-521a-1fec-b7b5-000094f0e7f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/bin.sh","pattern":"[url:value = 'http://123.11.72.175:34884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8625d079-beeb-cf33-e4b0-0000656a07af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/i","pattern":"[url:value = 'http://222.137.152.55:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26d5f12-d172-5eb2-dfc5-0000e5f46e1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/i","pattern":"[url:value = 'http://202.107.0.250:55295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f9ca26d-6f8d-f93c-510b-0000d1f11ca6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/bin.sh","pattern":"[url:value = 'http://27.37.102.10:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fe4c21-66eb-3742-1028-0000cb30b62d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/bin.sh","pattern":"[url:value = 'http://125.41.247.59:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad5d646-2466-6a57-fef2-0000a1baf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/bin.sh","pattern":"[url:value = 'http://203.2.151.15:42459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf52c1e-0d89-2ecd-9eb7-00001628a604","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.80.162:54439/i","pattern":"[url:value = 'http://110.36.80.162:54439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4147f6-0942-816e-8084-0000fbdce224","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/bin.sh","pattern":"[url:value = 'http://182.126.84.239:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502afb46-02e6-c257-5620-0000ac92452c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.134.160.73:39191/i","pattern":"[url:value = 'http://183.134.160.73:39191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e56d3b-1bcc-3b64-571e-0000dc7b4cf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/i","pattern":"[url:value = 'http://219.155.171.135:36711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6052e51-ae4e-c849-51be-0000e265fc3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/bin.sh","pattern":"[url:value = 'http://219.155.171.135:36711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a723511-92bf-1f89-9f2b-0000f5a85ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/bin.sh","pattern":"[url:value = 'http://175.174.41.135:59524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31410a70-8167-d53d-0551-00005bb3b443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/bin.sh","pattern":"[url:value = 'http://182.121.83.219:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74ed1eb-de13-3cbe-01d7-00005886e2f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/i","pattern":"[url:value = 'http://163.182.97.242:4040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c926b64-30a3-4b83-0ae9-000023a0662a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.113.196.55:38024/i","pattern":"[url:value = 'http://222.113.196.55:38024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c42fd0-78af-dcae-918d-0000f7ea4efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/i","pattern":"[url:value = 'http://103.249.199.3:36611/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b134db11-eb29-617f-5d94-0000aaea6439","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/i","pattern":"[url:value = 'http://115.49.73.86:41886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37727a46-7cb2-b504-b038-0000ebba3587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/i","pattern":"[url:value = 'http://175.9.165.81:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e307e147-c955-06b8-ef23-000058a28906","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/bin.sh","pattern":"[url:value = 'http://163.182.97.242:4040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b3683b-ad93-8795-32f2-000023044c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/i","pattern":"[url:value = 'http://123.161.90.29:49111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d5cb7c-0e15-e7a7-1979-0000772afcc6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/bin.sh","pattern":"[url:value = 'http://175.9.165.81:50484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0eedcc3-a83d-7328-7874-00000da0283b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/bin.sh","pattern":"[url:value = 'http://222.141.21.106:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1167be-a323-f9d5-8bad-00007bba4b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/bin.sh","pattern":"[url:value = 'http://115.52.194.55:43061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90edea43-13fa-733b-a18d-0000fc80f304","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.200.77:49632/i","pattern":"[url:value = 'http://42.227.200.77:49632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0335d17-06d4-bf8a-76ab-00005ddab2f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.124:33142/bin.sh","pattern":"[url:value = 'http://59.96.142.124:33142/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0830bdb6-4ca8-3db8-6401-00004217275d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/bin.sh","pattern":"[url:value = 'http://182.121.244.13:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993f738f-d253-f88d-e314-0000ac6b1e82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/i","pattern":"[url:value = 'http://175.149.88.173:35767/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175fba86-c154-7621-2da0-0000f43028dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/bin.sh","pattern":"[url:value = 'http://222.137.152.55:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d508a8e4-1ddd-aa1e-efeb-0000329883d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/i","pattern":"[url:value = 'http://182.121.83.219:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a834a6-381d-0b0c-0416-00004aa4bcf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/bin.sh","pattern":"[url:value = 'http://42.87.221.249:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aba516b-9797-55af-1290-000038e057e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/bin.sh","pattern":"[url:value = 'http://182.240.11.199:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e856ab28-2e73-716f-26df-00000dd3c3fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/bin.sh","pattern":"[url:value = 'http://61.53.205.176:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5987ab48-62f3-d8c7-9a08-0000b4d0ea2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/bin.sh","pattern":"[url:value = 'http://124.235.207.2:39666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4353af-8e1d-c7d3-95c4-0000581141d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/bin.sh","pattern":"[url:value = 'http://101.109.201.128:44332/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4697066-9a2d-f4a0-c9af-0000a37d5282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/bin.sh","pattern":"[url:value = 'http://42.85.169.225:40832/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d817f27-c6b6-0aa1-1c1e-0000fb6cc379","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/bin.sh","pattern":"[url:value = 'http://203.177.28.149:50084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f788a748-848d-b470-2b65-000088dab81d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/i","pattern":"[url:value = 'http://175.174.41.135:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e3e8a2-c961-04c5-1f88-0000812e06af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.113.189.94:60395/i","pattern":"[url:value = 'http://125.113.189.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d99e1ab-60a1-6a84-072f-0000efed1e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/bin.sh","pattern":"[url:value = 'http://115.49.150.183:34026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1113298-b120-5f71-37ed-000080b6d894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/i","pattern":"[url:value = 'http://203.177.28.149:50084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd91e9f-0ac4-88f2-cc8d-00002977ef20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/bin.sh","pattern":"[url:value = 'http://202.107.0.250:55295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3ce763-0660-96a5-c26d-000080b72925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/bin.sh","pattern":"[url:value = 'http://42.179.125.40:42620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef82e744-0911-e315-29d7-0000916ce77a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/i","pattern":"[url:value = 'http://182.117.68.176:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e971829-2c1e-8845-c422-00002f9aa651","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.252.55:54907/i","pattern":"[url:value = 'http://112.248.252.55:54907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aa27b96-27ac-8f8a-2526-0000f9fbe33f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.218.29:55917/i","pattern":"[url:value = 'http://61.53.218.29:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a20d802-d1a5-cdde-410f-0000857dfe85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/bin.sh","pattern":"[url:value = 'http://123.14.57.190:46376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a43f114-9065-cd4a-67a2-00000d2b8eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/i","pattern":"[url:value = 'http://123.14.57.190:46376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d8cd0c-e469-7967-1425-00000b304f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/bin.sh","pattern":"[url:value = 'http://115.55.10.187:42654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae02b62-20ca-a5ee-6935-0000695f452b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/i","pattern":"[url:value = 'http://27.215.84.16:59065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf9624d-dafe-21e5-9720-00001f9e18ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/bin.sh","pattern":"[url:value = 'http://182.124.162.58:48222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b804c6-5e94-0421-1c3f-0000c0825196","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87529139-6fb6-ece7-8935-000032f310b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/i","pattern":"[url:value = 'http://113.228.208.46:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d931bca-b04f-232c-ab7b-0000a87e5f31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/bin.sh","pattern":"[url:value = 'http://222.137.19.202:54735/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97defab5-585b-a08b-eae2-0000b8db8f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/GpzbWsi.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/GpzbWsi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd298f9-b299-28c8-628d-00009f26be10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/1.sh","pattern":"[url:value = 'http://198.144.179.82/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83683f6-48ec-e641-eb55-00009a2b1415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/i","pattern":"[url:value = 'http://42.230.30.16:36416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5c8747-e4a1-f126-f806-000097bccd86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/i","pattern":"[url:value = 'http://115.48.146.252:57987/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df510a4-093c-48a7-16aa-0000ad12a4ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/bin.sh","pattern":"[url:value = 'http://182.124.9.99:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a038d869-fefd-84bf-f999-0000d2934228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/bin.sh","pattern":"[url:value = 'http://39.90.149.223:46931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fefd960-23c9-64c4-c66d-0000dcee0f0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/i","pattern":"[url:value = 'http://61.53.202.74:59244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba346a1-414b-8277-c9c2-0000c53068c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f84d3e4-91ed-a3bf-15a7-00001a5dec08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe","pattern":"[url:value = 'https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e573551-7c29-0c44-29ef-0000ce3607c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv7l","pattern":"[url:value = 'http://31.77.227.119/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3524d0-eb68-18e4-784e-0000dea455c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/cat.sh","pattern":"[url:value = 'http://31.77.227.119/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b279dfca-b925-58b7-474f-0000473746c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85efcd91-dbdb-00d9-4a42-00004646c106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.arm7","pattern":"[url:value = 'http://31.77.227.115/meower.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ccc87-2a56-4691-ee6b-00008efa0fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/Services.apk","pattern":"[url:value = 'http://31.77.227.115/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e691f713-4ab0-0c21-be3c-000036e38cc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.so","pattern":"[url:value = 'http://31.77.227.115/meower.so']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffeedd9-fa97-9b2a-7a91-0000c7fb1984","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b059bf4f-bee5-683b-3402-0000fe5ad4c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6349de11-4af7-bcd7-4a32-0000f9299d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.248/sysorbit.apk","pattern":"[url:value = 'http://176.65.139.248/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1f63e7-b67c-8dc1-917d-00009b03b606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.rxx.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.rxx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fad144-8f84-4639-10db-000046ae8fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.214:53741/Mozi.m","pattern":"[url:value = 'http://59.96.138.214:53741/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--834a920d-b9c5-c277-9e93-000029d09668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/deploy.sh","pattern":"[url:value = 'http://43.228.157.73/deploy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f71a162-c190-f00c-ac7d-00002f3b969d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/gg11","pattern":"[url:value = 'http://191.44.112.89:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3250fd-bb8d-7e37-9fe4-00003b06a9c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/i","pattern":"[url:value = 'http://39.90.149.223:46931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8d174e-6ec5-6d57-a272-000018f89e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/bin.sh","pattern":"[url:value = 'http://125.44.196.40:38436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646eeae3-0ebc-e007-8a84-000051497c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/bin.sh","pattern":"[url:value = 'http://220.192.252.142:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bef10-7102-9c51-458a-0000ebd6b12a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/i","pattern":"[url:value = 'http://27.194.27.62:59829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248efb6e-ca15-b6ac-a972-00004b7735f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/bin.sh","pattern":"[url:value = 'http://42.239.150.62:42943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8372b00b-6848-ffa3-2511-0000a2ed1464","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.185:50547/i","pattern":"[url:value = 'http://115.48.149.185:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05472eb3-25fa-ca8e-f927-0000d0d1d8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://89.189.181.54:47685/i","pattern":"[url:value = 'http://89.189.181.54:47685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f353f0fd-d8e4-8cf3-73b3-0000afb4442d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/i","pattern":"[url:value = 'http://123.4.203.194:35564/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c051c2ed-f33d-4205-ad11-0000b0ecd233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/bin.sh","pattern":"[url:value = 'http://112.239.102.100:56270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87505a8e-56a2-bfd2-67d0-000034e29789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/i","pattern":"[url:value = 'http://42.239.150.62:42943/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e03a0d-eec8-19eb-0aa5-0000790dea2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/i","pattern":"[url:value = 'http://112.239.102.100:56270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2900b718-b2e0-c6ab-7194-00004dc78f30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/bin.sh","pattern":"[url:value = 'http://182.113.202.0:42578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eaca7a-ba7e-30f5-9273-0000dcda9c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.202.62:60041/i","pattern":"[url:value = 'http://105.186.202.62:60041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcdbeb96-082c-9015-4811-0000a163a06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://funneldiy.com/Installer_c2cea6.msi","pattern":"[url:value = 'https://funneldiy.com/Installer_c2cea6.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1e570a-abaf-d98a-a3c5-0000f6143602","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/bin.sh","pattern":"[url:value = 'http://182.123.211.251:59971/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a5429-abfc-8a52-7b54-000096831839","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.67:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddd5de4-f5d7-82b3-49f1-0000adeab0af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/i","pattern":"[url:value = 'http://182.117.10.67:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f070a126-0007-30bb-35fd-00002faf8398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/i","pattern":"[url:value = 'http://125.44.196.40:38436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfef20e8-20c9-cd8e-2d5b-0000f6b61f22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/i","pattern":"[url:value = 'http://182.123.211.251:59971/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71bd64e9-3e8d-7117-c765-0000e604cf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/i","pattern":"[url:value = 'http://120.28.194.92:40193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1a9da2-fbe8-ca20-1a14-00001707c1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/bin.sh","pattern":"[url:value = 'http://182.117.68.176:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cf2e57-a873-3dc0-9653-00009d59ab12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Jz4KcAs.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Jz4KcAs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcb351-f852-2733-4b28-0000e2eb42be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/bin.sh","pattern":"[url:value = 'http://125.43.23.92:55029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f926b-324f-6410-979d-00007e8b84ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm5","pattern":"[url:value = 'http://94.154.43.146/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eaf0cca-5289-69d7-b63d-00008292a753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/x86_64","pattern":"[url:value = 'http://94.154.43.146/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bb2f32-c355-8f88-a642-00009d362658","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mpsl","pattern":"[url:value = 'http://94.154.43.146/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d469e9fb-600d-f80a-1b30-0000f6354812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mips","pattern":"[url:value = 'http://94.154.43.146/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7716c3d1-f026-2892-85af-00006c3e2b02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm6","pattern":"[url:value = 'http://94.154.43.146/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--374b1b01-69b7-40ba-7907-0000bd8c7c2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.m68k","pattern":"[url:value = 'http://94.154.43.237/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfc7abf-9ef0-c2e1-c829-00005bafd335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.arc","pattern":"[url:value = 'http://94.154.43.237/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060ec39d-9110-b822-310c-000006d2c781","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv5l","pattern":"[url:value = 'http://94.154.43.237/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9918a2fd-3bcc-42f4-b16d-0000c637e389","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm4","pattern":"[url:value = 'http://94.154.43.146/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0011f347-7749-e90f-827d-0000d4824c67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm7","pattern":"[url:value = 'http://94.154.43.146/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b672fd7-6899-0491-3f9d-0000bd7aaaf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mips","pattern":"[url:value = 'http://94.154.43.237/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d23905e-7556-a5db-7167-00004172bd51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv6l","pattern":"[url:value = 'http://94.154.43.237/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae777571-4229-fa06-0c53-00003d6c2e4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.i486","pattern":"[url:value = 'http://94.154.43.237/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dbe0920-e910-869f-31ad-000031202681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.powerpc","pattern":"[url:value = 'http://94.154.43.237/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ffb588-0e9d-271b-d1d4-0000afe0ba9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsel","pattern":"[url:value = 'http://94.154.43.237/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca56bde1-a8f5-3ccf-00ff-00008f35dbc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/a.sh","pattern":"[url:value = 'http://94.154.43.237/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77c332d-4e83-d905-0d99-0000693bc89d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sh4","pattern":"[url:value = 'http://94.154.43.237/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f15f2dc-ce71-3815-8a20-00003bb2ee31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv4l","pattern":"[url:value = 'http://94.154.43.237/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3438a11f-586d-6305-726e-00007c1294e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv7l","pattern":"[url:value = 'http://94.154.43.237/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5599afef-4242-5e67-25b1-0000f68459a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.x86_64","pattern":"[url:value = 'http://94.154.43.237/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84b36c7-af6a-f5ee-7ab0-00000884ccee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sparc","pattern":"[url:value = 'http://94.154.43.237/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06aabe2-8695-0a0b-d147-0000be84acc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm6","pattern":"[url:value = 'http://94.154.43.175/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72d2e6c-a108-8001-4795-0000fb632244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.237/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5963fa58-3f08-875d-c397-0000ac31032a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm5","pattern":"[url:value = 'http://94.154.43.175/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c74701-d6dc-0c68-4ae6-00004f8ca19e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mpsl","pattern":"[url:value = 'http://94.154.43.175/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631581c8-d769-718d-831b-0000248fcfd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mips","pattern":"[url:value = 'http://94.154.43.175/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b9aa9-71b6-a587-42a9-00007311f9a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm7","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0381ab32-bbb1-9d1b-fe67-000004d5a2c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c146dc-0fb3-7fdd-2a0a-00003aa5939c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mpsl","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6591c3e-9bc0-5814-2ac9-00002e4339df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fb4c3-54d2-cb24-fb86-000051502b0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.m68k","pattern":"[url:value = 'http://94.154.43.10/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76d9b74-ca63-bb29-7fd6-00000638cba1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm7","pattern":"[url:value = 'http://94.154.43.175/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb9cfa7-1449-d8cd-d1b9-0000d69ece5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.sh4","pattern":"[url:value = 'http://94.154.43.10/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0870edd-07a2-b5db-18e9-00009c78d860","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.i686","pattern":"[url:value = 'http://94.154.43.10/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76138015-f79a-eda6-eee1-000051a6fdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mips","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ad93a9-6a51-40b0-a429-0000d0d42504","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.spc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65fb85-86a3-1506-ceed-0000d9183128","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm5","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--783f810e-4bb3-f646-4d16-00006a16eceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz.sh","pattern":"[url:value = 'http://94.154.43.10/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4398635-d79d-8e89-f0b9-0000e40ad5f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a56bb-4ab0-bd3a-1fbc-00002cfe57b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/debug","pattern":"[url:value = 'http://94.154.43.10/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb2df0-36ad-0039-7a92-0000564057aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.ppc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56caa3f-d970-0b34-d611-0000cbad9ec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm6","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3ca92e-227b-59e9-3841-0000960f5589","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86_64","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15ae4408-6a9a-2027-4423-00005f1e10ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i586","pattern":"[url:value = 'http://94.154.43.84/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabce564-e135-513f-6967-00005a76deb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mipsel","pattern":"[url:value = 'http://94.154.43.84/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d56a230-688e-ad50-931b-0000ce248a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv4l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7daff03-6762-7701-a843-000003123d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.x86_64","pattern":"[url:value = 'http://94.154.43.84/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c1178d9-7891-9bd2-8e6d-0000fb789871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.sh4","pattern":"[url:value = 'http://94.154.43.84/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e8fa51-cf79-0b70-ed15-0000d98a6243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i686","pattern":"[url:value = 'http://94.154.43.84/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944d9371-40d8-f21d-828c-0000f344a3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv5l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a490e423-143a-cf3b-15a6-00000460181f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.powerpc","pattern":"[url:value = 'http://94.154.43.84/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf60c0b2-96ba-3a6f-7f14-0000b4e4d979","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv6l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50404f-5ae2-f48b-0355-000014a2912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.m68k","pattern":"[url:value = 'http://94.154.43.84/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17c7499-4432-69b6-646f-0000145447f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mips","pattern":"[url:value = 'http://94.154.43.84/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67bf1f3-abfc-acc9-acad-00008984f0c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv7l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7112846-2b13-26da-8958-0000b78c3a43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/w.sh","pattern":"[url:value = 'http://94.154.43.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7d6026-dc07-8af6-f42b-000083ff19a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm","pattern":"[url:value = 'http://94.154.43.122/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d16124e-9f21-8d5a-eeac-00000252208b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86_64","pattern":"[url:value = 'http://94.154.43.122/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb7a8a3-7198-9c0b-3e6a-00001c93b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mips","pattern":"[url:value = 'http://94.154.43.122/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56c1d333-b127-5d4e-cfb3-0000942d7acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm5","pattern":"[url:value = 'http://94.154.43.122/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40700829-5f37-2528-545c-00005b36c3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mipsel","pattern":"[url:value = 'http://94.154.43.122/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75158bd-4cdb-8ea0-2420-000057fe9e64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/spc","pattern":"[url:value = 'http://94.154.43.122/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cfb21f-4c17-648b-5e74-00003e24b240","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm7","pattern":"[url:value = 'http://94.154.43.122/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--209b9c75-3931-e30c-0122-00001c6560ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/m68k","pattern":"[url:value = 'http://94.154.43.122/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc88289-4879-20a3-cd39-00008698d525","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm6","pattern":"[url:value = 'http://94.154.43.122/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a5d72a-b3eb-a3f7-20ef-0000a96982bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86","pattern":"[url:value = 'http://94.154.43.122/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c04504b3-9b7b-6f21-0be9-000051b4753c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/sh4","pattern":"[url:value = 'http://94.154.43.122/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b517e6e4-6dbf-b7ea-71d4-0000d16aecca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/ppc","pattern":"[url:value = 'http://94.154.43.122/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3228aa6a-2616-5e06-8aa8-0000d06bf7f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/bin.sh","pattern":"[url:value = 'http://182.112.13.24:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57895b2b-4f0b-4fd6-92cb-00000d4553e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/i","pattern":"[url:value = 'http://110.36.86.0:40490/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f5b5f5-1d2d-2ba5-7013-0000131ca803","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/bin.sh","pattern":"[url:value = 'http://175.149.135.190:37738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54fbf35-148c-4597-79e9-000053e88c66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/bin.sh","pattern":"[url:value = 'http://110.39.224.167:59812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8f53aa-b5be-b2fb-4d09-0000cc080dc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.152.223.228/svc.exe","pattern":"[url:value = 'http://93.152.223.228/svc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9056a341-1410-e240-6598-0000820cb922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c9e3b-adf5-ed0b-0e20-0000778ec568","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/0NOjfFC.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/0NOjfFC.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be565f17-9d7c-0557-96e2-0000523445bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/i","pattern":"[url:value = 'http://110.39.224.167:59812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46dc40-82fc-8abc-43d5-000036dea627","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/bin.sh","pattern":"[url:value = 'http://218.13.149.41:37814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc33122d-f4f5-c77e-0ff2-000003c78104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/PithnoModule.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/PithnoModule.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9494cd51-172d-a209-31d0-0000103effe3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/i","pattern":"[url:value = 'http://175.149.135.190:37738/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b31b0cb5-c092-80d6-ded4-00001133ff06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/i","pattern":"[url:value = 'http://125.43.23.92:55029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55342b4-1818-7ae9-aded-0000060c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/i","pattern":"[url:value = 'http://218.13.149.41:37814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8015d086-6009-4ef3-882b-0000fd2b03e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/i","pattern":"[url:value = 'http://123.8.160.185:35924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0a3f1c-c318-14ec-7cd9-00005941dc37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/bin.sh","pattern":"[url:value = 'http://123.8.160.185:35924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c67792-549d-1b09-5dff-00001898a143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Cgt6XB8.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Cgt6XB8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ca2a05-ae47-a043-ecd8-0000e6676056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/bin.sh","pattern":"[url:value = 'http://210.208.111.234:45761/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a7f47-0cca-f75d-5baa-0000d46642e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/bin.sh","pattern":"[url:value = 'http://115.58.88.232:50270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7060eee2-68b6-0efe-37a3-0000d35ffe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/i","pattern":"[url:value = 'http://210.208.111.234:45761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee8d096-f463-4bd7-b6c8-000022012e77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.34:44324/i","pattern":"[url:value = 'http://59.97.252.34:44324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a94e8d-16f6-9a47-85b1-0000dc6bb4c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/bin.sh","pattern":"[url:value = 'http://27.194.27.62:59829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a4681d-7974-e5a4-42e8-00009c17f341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/i","pattern":"[url:value = 'http://113.239.81.215:38553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd872b4b-d3fb-7ab3-7d93-00008d15ccb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/bin.sh","pattern":"[url:value = 'http://175.151.64.247:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e48520-54a4-fbe3-6dbb-00002da84925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/debug.dbg","pattern":"[url:value = 'http://198.144.179.82/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63481e06-1c2b-fa96-c8d6-00005cbdcf02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86","pattern":"[url:value = 'http://198.144.179.82/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e25219-03a4-48e5-e8d6-0000210861b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm5","pattern":"[url:value = 'http://198.144.179.82/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdeb03a3-a11d-e666-72bf-000033bdce59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm6","pattern":"[url:value = 'http://198.144.179.82/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c25ff3-0dc7-26bf-8be7-00000bbd6ab8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86_64","pattern":"[url:value = 'http://198.144.179.82/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cbc9191-f812-e333-e23a-0000a22ad3d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/spc","pattern":"[url:value = 'http://198.144.179.82/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba8cd9f-574e-ce40-1708-0000a4603881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/sh4","pattern":"[url:value = 'http://198.144.179.82/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efa2fc8-669a-bd71-faf0-000024bea177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/ppc","pattern":"[url:value = 'http://198.144.179.82/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aec3335-5a75-8384-3d48-00008b01a93c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm7","pattern":"[url:value = 'http://198.144.179.82/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8690a90a-55a8-bbeb-d7d7-0000762b541a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm","pattern":"[url:value = 'http://198.144.179.82/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb46ef40-5980-849f-5de5-0000c2b5c303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mpsl","pattern":"[url:value = 'http://198.144.179.82/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e942989-2c11-d125-9292-0000a9b6ad49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mips","pattern":"[url:value = 'http://198.144.179.82/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc940269-859c-f2ee-f273-000076248062","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm64","pattern":"[url:value = 'http://198.144.179.82/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b81d5f-01e7-3895-95f0-0000a9407b93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/m68k","pattern":"[url:value = 'http://198.144.179.82/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542b6310-3248-c198-0fc1-00000a3c27ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8894093030/v8eACE4.exe","pattern":"[url:value = 'http://62.60.226.140/files/8894093030/v8eACE4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23c69a9-bfea-7e04-0c96-0000b98f8fea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/bin.sh","pattern":"[url:value = 'http://42.239.224.11:42582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4c4c8c-de2e-c5d1-ad00-00003fffaa64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.181.102.189:53344/bin.sh","pattern":"[url:value = 'http://103.181.102.189:53344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da85dcd7-4d75-adc8-4098-0000ccef9b7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/bin.sh","pattern":"[url:value = 'http://36.48.114.30:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--085b09e9-474a-4376-62a3-00007f3e9dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/i","pattern":"[url:value = 'http://95.56.232.109:58750/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f15d40-2aa2-e2b2-c37d-00004143292d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/i","pattern":"[url:value = 'http://42.239.224.11:42582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13f9abb-f37c-3b42-c4b5-000000b51b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/bin.sh","pattern":"[url:value = 'http://123.4.203.194:35564/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11722625-b4d8-23a3-c513-0000b7255280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/i","pattern":"[url:value = 'http://60.177.244.198:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b4132c-e42b-71b8-a219-000068c2cc25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/i","pattern":"[url:value = 'http://36.48.114.30:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f6836d-1011-c01d-81d0-0000f0098138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/bin.sh","pattern":"[url:value = 'http://182.123.143.22:37354/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f661f74-250e-84a3-d5af-0000ce054fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.175.206:55714/i","pattern":"[url:value = 'http://123.5.175.206:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac31421-e5b0-8ae7-a288-0000e13a2dec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/bin.sh","pattern":"[url:value = 'http://101.108.253.192:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb1bac4-004a-b5bc-ab94-0000c09cbe35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.121.27:53153/i","pattern":"[url:value = 'http://105.184.121.27:53153/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55504c9-04c3-5d37-7d3a-0000156588bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/i","pattern":"[url:value = 'http://182.123.143.22:37354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e895c9-d38c-f63c-1403-0000c8effc45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5e7528-e600-4a4e-8a9c-00001cb3a388","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.215:48371/i","pattern":"[url:value = 'http://120.84.214.215:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b54640-d7d2-48f4-cf34-000099c467c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--195b7023-1c3d-e3f9-d2e9-00001dfb4c84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2757082e-8527-37d5-598f-0000fb73603c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4b01d4-a2dd-b27a-3ee4-000086e37184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977259ec-d6d7-ba62-f2c0-000081fc9af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526e7ed4-369e-aaa3-fafe-00006540c037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4819d81-3636-5fec-7f04-00004ad1733c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af64e53e-0f9b-59c6-a0b1-0000b3552f73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49115d1b-fa8f-25ab-3b00-000081a00a9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66cce6-6f74-45b8-ffd1-00009a87b5ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--787361b4-bbcb-5448-10bb-000083cb697a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4dd394-2fb9-fce9-18dc-0000ac14fe2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dfb7fa-594a-a870-fa1b-0000f1cd4497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c9b1cc-c805-0496-d158-000073a5cf83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55e2ed2-6719-364c-46b4-0000fdafd1fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c575944-d91e-9448-146c-00001d934264","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81102e18-1ea0-ab22-86bc-0000f0f3aeaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede5def3-ab80-99f9-10d2-00008c2f76ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8faefa5f-9260-4346-bd66-00004cabab74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1aa30e-4ba8-36f7-8d28-000086a07eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da5da0a-0d9d-368b-d599-0000248abaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5bd289-2dcb-f3ec-a20e-000055254aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90893f94-f4c7-911c-dbaf-0000c2d644aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.41.127:41358/i","pattern":"[url:value = 'http://182.113.41.127:41358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14655332-d659-f1aa-577c-00007fd7ef04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/i","pattern":"[url:value = 'http://120.28.194.30:35812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cad90b-374a-771f-f040-0000d368ffe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/i","pattern":"[url:value = 'http://101.108.253.192:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666a9b1a-009f-8c3f-5dd6-0000da15b8f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/bin.sh","pattern":"[url:value = 'http://95.56.232.109:58750/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea00cf2-033f-312a-2f55-000038550e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.132.10:54132/bin.sh","pattern":"[url:value = 'http://59.180.132.10:54132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2492082-9fa2-b041-52f1-00008c435724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/bin.sh","pattern":"[url:value = 'http://42.226.69.203:60026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2ca642-8774-c6ce-23df-00004ded6b52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/i","pattern":"[url:value = 'http://42.226.69.203:60026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf3a4c10-20eb-64bd-1951-000072903fda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47839/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9676def9-e722-4987-d1f5-0000e8be31ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/bin.sh","pattern":"[url:value = 'http://123.14.127.32:60165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf370f8f-7014-6082-a8d2-0000213aa06c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/i","pattern":"[url:value = 'http://196.190.133.180:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65c4373-3a84-a03f-5e2d-00001b489258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.153.109:41774/i","pattern":"[url:value = 'http://61.53.153.109:41774/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90cd38b-9d63-6c42-43f9-0000bab56be1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d10b325-6566-f527-d2b0-000018af2c87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.64.43:42442/bin.sh","pattern":"[url:value = 'http://114.227.64.43:42442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c99b8d-7221-77de-3013-00006d96e47b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.162.6:59734/i","pattern":"[url:value = 'http://42.234.162.6:59734/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a57ea5b-3b43-ab1e-5476-0000c5015ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/i","pattern":"[url:value = 'http://123.14.127.32:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f63feff-7b6e-01c6-a26b-0000146a8dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/bin.sh","pattern":"[url:value = 'http://123.5.153.69:57210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ae888a-7867-2b4c-d9b3-0000dae047a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.64:48265/i","pattern":"[url:value = 'http://182.116.113.64:48265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeaec7d-694c-a3db-f29b-00001a4b09c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/i","pattern":"[url:value = 'http://42.224.194.129:53622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b347684-796f-0158-c0d7-00004a9bdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/bin.sh","pattern":"[url:value = 'http://42.231.187.33:46290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce75ef8-b10b-a622-1b59-000055f760cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.236.135.234:57543/bin.sh","pattern":"[url:value = 'http://113.236.135.234:57543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144f868-248a-a340-dd97-00001f66319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.184:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f850749f-668b-19c8-e4c9-00002201579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/i","pattern":"[url:value = 'http://182.117.78.184:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c730de6-1da8-9951-04c7-000025bbb70b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/i","pattern":"[url:value = 'http://110.38.210.180:57109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d7e29b-df82-610b-a1dd-000071cfc4c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/bin.sh","pattern":"[url:value = 'http://221.225.253.118:42553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7bdc42-6ffa-3520-36d3-00006d323e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/bin.sh","pattern":"[url:value = 'http://119.166.79.188:45758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f0c221-4e54-d7c3-8084-000089882e6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/i","pattern":"[url:value = 'http://119.166.79.188:45758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10402521-ce8d-2b11-409b-000053d6f81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/bin.sh","pattern":"[url:value = 'http://42.224.67.38:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf1c3bc9-d016-35d1-a0ed-000042bb5bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.135.234:57543/i","pattern":"[url:value = 'http://113.236.135.234:57543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f205f4-7a31-7b0f-b3d9-0000687ff973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/i","pattern":"[url:value = 'http://221.225.253.118:42553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102cb44-a222-ffdf-a21d-000045e50f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.211.139:46635/i","pattern":"[url:value = 'http://110.38.211.139:46635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac886b4-4247-210e-14af-0000ce476607","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/i","pattern":"[url:value = 'http://42.231.187.33:46290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e828d0-0eec-eb1d-3642-00008a73b40e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/bin.sh","pattern":"[url:value = 'http://123.9.41.95:38149/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac2dcc6-5391-1626-80ca-000039b38669","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/i","pattern":"[url:value = 'http://42.224.67.38:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b38a1f-edb6-9613-b1d0-000070083334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/bin.sh","pattern":"[url:value = 'http://110.36.77.162:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff00e482-01be-b0fc-b2c6-00002cd5bc57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.9.97:44103/i","pattern":"[url:value = 'http://115.55.9.97:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a2fbe9-c10b-21f8-a8f1-00009dd55456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i486","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4b2ccb-d966-cc07-4bb0-0000b1b3cf25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/wget.sh","pattern":"[url:value = 'http://91.92.47.97/bins/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6613c5ca-0c6c-c357-fb09-00005a7d348b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1341279d-e20f-3fbc-63e9-0000daa3ad7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.sh4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05606786-27c5-6d9c-e931-000076c0bea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mpsl","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e601ca0f-c78b-b307-cfe4-0000b9380d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86_64","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd8b65-7444-e5f9-4438-000087c8b3fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm6","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b2a14f-abdc-c82e-4c7a-00001dc3d0eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mips","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64557b93-5692-428a-f5fd-0000dce94625","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.spc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c16e0f-e271-7ca0-4df9-0000e837b6d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac4dadf-da7f-9c1c-f566-0000957d1c15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm5","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdb2620-4fbd-62f8-ee9a-00001ee48bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc440","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646091de-8d1f-b6b2-4a01-0000568987f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i586","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f475a662-11f3-891e-6164-00006717c4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm8","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc3ea49-def0-2027-9ef4-00002dc17b70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9e9599-7b30-7803-b6fa-00001d350631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.m68k","pattern":"[url:value = 'http://91.92.47.97/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cabbf3-645d-14fb-492b-00003f74d49e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm7","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba1f404-7235-a976-7cfc-0000227e5afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c9c8d3-318a-e680-c72e-00009a22e991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/i","pattern":"[url:value = 'http://210.208.110.172:59900/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c31e37-a88f-f966-329d-0000037e1af8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/bin.sh","pattern":"[url:value = 'http://60.184.149.85:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--137e1cb8-9c2e-8d2e-3ba0-00006ef1eb73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/i","pattern":"[url:value = 'http://115.54.117.199:59554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5abd48-450e-3fd6-5359-0000502af173","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/bin.sh","pattern":"[url:value = 'http://222.141.13.126:32997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2b1257-0d68-2f63-8a61-000049cdf4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/bin.sh","pattern":"[url:value = 'http://115.58.143.1:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48994f0e-a47c-0431-42e6-000000da10c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/i","pattern":"[url:value = 'http://110.36.77.162:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8884cb-1c49-38b0-9119-0000d5006a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/i","pattern":"[url:value = 'http://60.184.149.85:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1c479e-b6d9-a40b-5a2e-0000a8c255d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.248.169:58267/i","pattern":"[url:value = 'http://110.39.248.169:58267/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9bf6e1-0445-bcc5-3b48-0000796df3a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/523965","pattern":"[url:value = 'http://5.182.210.174/523965']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72ec1ebb-4c02-90cd-4006-00004080c5a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/694268","pattern":"[url:value = 'http://5.182.210.174/694268']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d367acdf-4da8-2f92-9a09-0000a3c7306e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/46c7b2","pattern":"[url:value = 'http://5.182.210.174/46c7b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b5c9ef-80ff-7c3b-d22c-0000f7fbf92e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9846b5","pattern":"[url:value = 'http://5.182.210.174/9846b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063c568c-0916-cefb-6ea1-0000dfd72119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7836d7","pattern":"[url:value = 'http://5.182.210.174/7836d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1a268f-6357-ea64-b776-000020a36333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00df69","pattern":"[url:value = 'http://5.182.210.174/00df69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bc28539-974c-13ba-51b2-0000ec525418","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e5a00","pattern":"[url:value = 'http://5.182.210.174/8e5a00']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67666c3-745f-411c-4b05-0000ed5e7529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/796fc4","pattern":"[url:value = 'http://5.182.210.174/796fc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5770dea-48f9-8fb3-6517-00002bcc8adf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a8ac25","pattern":"[url:value = 'http://5.182.210.174/a8ac25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b5757e-7f91-34d3-f3a5-0000435acaf0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5969e9","pattern":"[url:value = 'http://5.182.210.174/5969e9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa0cd8-bf6d-139d-0168-0000ed5a24a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1a029e","pattern":"[url:value = 'http://5.182.210.174/1a029e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bae0e34-5634-2282-53cd-000078f9abc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6b8b4d","pattern":"[url:value = 'http://5.182.210.174/6b8b4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e6cf18-ff72-34bf-74a6-0000e3483bcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/47b560","pattern":"[url:value = 'http://5.182.210.174/47b560']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417ef614-b123-2fde-782b-00001a025443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acdc3b","pattern":"[url:value = 'http://5.182.210.174/acdc3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61daacef-f078-a982-d8f6-0000327c1a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e51ddb","pattern":"[url:value = 'http://5.182.210.174/e51ddb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18992714-05c0-f923-825f-0000bc4fd79f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5ee89","pattern":"[url:value = 'http://5.182.210.174/c5ee89']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb551eac-ec3d-6dfd-6b4c-0000eb547bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4b26b9","pattern":"[url:value = 'http://5.182.210.174/4b26b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20036c91-bb63-0ac9-54a2-000058e6e258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c9023c","pattern":"[url:value = 'http://5.182.210.174/c9023c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e778b6b-9d57-af81-12a3-0000a6e2c41e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f873b2","pattern":"[url:value = 'http://5.182.210.174/f873b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdddb62-9c0c-30c3-224e-0000258be8d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1d493","pattern":"[url:value = 'http://5.182.210.174/a1d493']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5ea4c0-1c99-b0cd-f573-00002361d6ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ec572","pattern":"[url:value = 'http://5.182.210.174/8ec572']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ceab23-38a9-4a97-c4b3-0000ff523757","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d1d1d3","pattern":"[url:value = 'http://5.182.210.174/d1d1d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6deb3487-2931-040f-4f6f-00009cfe80c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fefd81","pattern":"[url:value = 'http://5.182.210.174/fefd81']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc63305e-602a-7705-75a0-000099a940d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7e327","pattern":"[url:value = 'http://5.182.210.174/b7e327']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b6a10f-833c-e9eb-27c1-00006a3499e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba982a","pattern":"[url:value = 'http://5.182.210.174/ba982a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca4d9ae-9955-d786-e957-0000a6d12caf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de3e3b","pattern":"[url:value = 'http://5.182.210.174/de3e3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6a7a29-1e6e-d41c-7bfe-0000bb5d2184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c6503e","pattern":"[url:value = 'http://5.182.210.174/c6503e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369cff40-4b60-e48d-594d-0000ee71ea45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/af8816","pattern":"[url:value = 'http://5.182.210.174/af8816']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6bbe3d-20bd-18dd-1e81-000078e30876","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dfbfd1","pattern":"[url:value = 'http://5.182.210.174/dfbfd1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a7d69f-3fad-2c75-d1fc-00009de9ee09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a74d7e","pattern":"[url:value = 'http://5.182.210.174/a74d7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ededa808-2ad3-5455-2cd4-00004200bcdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b2ad0","pattern":"[url:value = 'http://5.182.210.174/1b2ad0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b8dc84-be2e-323d-7fa1-0000fa7d4716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1493f3","pattern":"[url:value = 'http://5.182.210.174/1493f3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71c7d41-1815-7af7-541c-00000bbef91a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/18c0c9","pattern":"[url:value = 'http://5.182.210.174/18c0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93964e5f-024a-60dd-abeb-0000e400784a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6af82","pattern":"[url:value = 'http://5.182.210.174/e6af82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e69061c-2d83-efb0-a2f0-0000837e61ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ef2a92","pattern":"[url:value = 'http://5.182.210.174/ef2a92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22018b82-11e2-796c-a973-0000b9b7fb74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e9f60","pattern":"[url:value = 'http://5.182.210.174/8e9f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37899535-3b65-0295-7951-00004e842739","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pm68k","pattern":"[url:value = 'http://157.173.119.111/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bafcbc5-c784-4dca-6d0e-00000d75a182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.arc","pattern":"[url:value = 'http://77.239.124.108/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b3f2fd-a34f-5c45-3941-00003d88c4c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86_64","pattern":"[url:value = 'http://157.173.119.111/bins/px86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afddbb5f-dedb-89c6-8af7-00006cc5f596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm7","pattern":"[url:value = 'http://157.173.119.111/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3da73-49c0-6b79-ad52-0000c6cc3d1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm5","pattern":"[url:value = 'http://157.173.119.111/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c58d9a9-30c9-7a1d-82ad-0000179584dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.aarch64","pattern":"[url:value = 'http://77.239.124.108/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58edf57d-b6bd-b949-7ced-00001f2f35c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.powerpc","pattern":"[url:value = 'http://77.239.124.108/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0343dd58-ca4c-d76b-5e8c-00004d9a91dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.x86_64","pattern":"[url:value = 'http://77.239.124.108/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf9e2e9-5a31-b5cd-3870-0000fa6c752c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv6l","pattern":"[url:value = 'http://77.239.124.108/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ca63b8-3caa-2956-adf4-00000a5af914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm","pattern":"[url:value = 'http://157.173.119.111/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d4b12a-c527-9d72-3fbd-0000bdcc0ffc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv5l","pattern":"[url:value = 'http://77.239.124.108/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e65b23-f59c-50dc-af64-0000de5b7ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pspc","pattern":"[url:value = 'http://157.173.119.111/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f2072d-7dfa-e444-6382-0000d811958f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/psh4","pattern":"[url:value = 'http://157.173.119.111/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce77672a-c29b-f782-b126-000025719fa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmpsl","pattern":"[url:value = 'http://157.173.119.111/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e2d3a8-e96f-4ef8-bf11-0000c70c5c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv7l","pattern":"[url:value = 'http://77.239.124.108/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba5a1e3-731d-4770-4d11-00004e72f1e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmips","pattern":"[url:value = 'http://157.173.119.111/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fda2f2-2142-3439-7cfb-00001d0bb25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sparc","pattern":"[url:value = 'http://77.239.124.108/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a0e57a-2afc-ae4a-eba2-000058cf0c79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pppc","pattern":"[url:value = 'http://157.173.119.111/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb31e444-a1c1-dad0-b3f4-0000e82956ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mips","pattern":"[url:value = 'http://77.239.124.108/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49cf806b-4eb1-f8e4-11be-000080ac264c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv4l","pattern":"[url:value = 'http://77.239.124.108/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8da8bc9-61ac-e76d-5b4f-0000d47992f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm6","pattern":"[url:value = 'http://157.173.119.111/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e21bee2-2a40-f909-21cd-0000683fd216","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.i486","pattern":"[url:value = 'http://77.239.124.108/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--871dd092-9005-f8a4-628e-0000e8df8071","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.m68k","pattern":"[url:value = 'http://77.239.124.108/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e25c73f-4dcf-0a9b-6c8a-000014fe72e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mipsel","pattern":"[url:value = 'http://77.239.124.108/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--212f8257-129f-58fa-d323-00003fe1ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sh4","pattern":"[url:value = 'http://77.239.124.108/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d12d4b4-4003-7745-efe1-000020cc620c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86","pattern":"[url:value = 'http://157.173.119.111/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--133b1c4e-0c45-17c5-e0a3-0000d90e510e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sparc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee38f883-0710-bd78-ac78-0000e36233b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea95cdc-5121-6d5f-150e-0000c9e18000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454baa2-4777-95fa-6854-00005ca61fab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1054014b-ba26-77d0-0743-0000fda48333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sh4","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb007884-4a4f-941a-319a-0000f5ac05b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e2053ce-663d-e137-6177-0000c5bfd0f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1778aa22-01b9-980e-615a-0000c5897a5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sh4","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e600b1ec-26cf-4775-00e5-0000a950f375","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sparc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6836df-9030-f0f0-975c-0000b8d64f57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mips","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afaf31f2-a4ec-d4ea-a4a0-0000c2025b74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm8","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f102c63-f377-caca-7586-00009a614b22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm7","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44d074f-95b8-604b-37a7-0000c89c246d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mipsel","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f92b1d28-f89e-6bc1-cec3-000091f8c753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86_64","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa40ceb7-b2f1-6b20-fa8d-000017c216c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7440209-2048-1fd2-10b0-0000b820998d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.m68k","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9879bb-aa4b-6096-8aa2-00003d548dd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622a4875-b2f3-7751-07da-00004557e3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.ppc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df01c388-0e78-2c9c-5529-00008c80bb52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mips","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6c65de-6b6c-3351-2fde-00002fefefa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b4d2d2-65b7-9de5-7e4e-0000057974b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc6c4a5-30d7-8aba-1b10-0000f654af71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm8","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec60fe26-2864-5f9a-ccb7-00000f3bd27b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mipsel","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b79d934-aebd-40ea-2301-0000ae37bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm7","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11279980-8332-a0d9-f089-000010cada07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/dl.sh","pattern":"[url:value = 'http://91.92.42.242:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe4a4bb-2ea5-cbed-c840-000050710b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dlink.sh","pattern":"[url:value = 'http://31.77.227.102/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8b5c8d-e7e5-39d0-4ad0-000071ff8557","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/dl.sh","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d2aeed-c276-384e-000a-00000d1524eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arc","pattern":"[url:value = 'http://94.154.43.67/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a04014a-796d-f24e-e5a7-0000970db8ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.i586","pattern":"[url:value = 'http://94.154.43.67/bins/David.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da639507-2eb7-c097-4b9f-000029b41d4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03235831-ca9f-3579-6d48-000001da6c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e178cbf2-403f-a404-5db5-000034e6157a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.67/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b7f530-f686-3de9-b9d9-0000ecd39350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/check3.sh","pattern":"[url:value = 'http://43.228.157.73/check3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c106e441-38e4-8116-9f5c-0000565f3145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86_64","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6506e31c-17ff-9c1a-0ae2-00007d7a1ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.ppc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932df75e-d38b-9da2-32fb-00008c766d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.m68k","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a76b91e-853f-4b8b-c6c4-00006eaf0a26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/bin.sh","pattern":"[url:value = 'http://42.59.235.112:57254/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0443051-5c7b-0139-b2c9-000037ffb2f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/i","pattern":"[url:value = 'http://222.141.13.126:32997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15aa7c88-21e3-d719-1fc7-0000aed9738f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/bin.sh","pattern":"[url:value = 'http://182.116.50.112:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a13087b-8715-62f1-817c-0000e0b509e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/i","pattern":"[url:value = 'http://115.58.143.1:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88687dbe-987b-fdc3-defe-0000e24e78ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/i","pattern":"[url:value = 'http://182.116.50.112:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03a2e04-0381-7ad5-02e3-00003e743d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/bin.sh","pattern":"[url:value = 'http://120.28.193.143:37216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58299042-03da-c2e0-7490-0000b49b0e2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/bin.sh","pattern":"[url:value = 'http://210.208.111.100:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6529e1a4-b50b-be9c-b56d-00002fd0eab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.88.128:56380/i","pattern":"[url:value = 'http://123.8.88.128:56380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f0929c-34b6-f7c9-1064-0000feb51e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/i","pattern":"[url:value = 'http://120.28.193.143:37216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1242bc38-fb47-c2a9-0867-00000eac309c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/bin.sh","pattern":"[url:value = 'http://42.235.52.223:51706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--373a1dbc-65f1-6387-5ca4-00000152f743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/i","pattern":"[url:value = 'http://210.208.111.100:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d824e15-5e93-080e-38db-000083d7a4bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/i","pattern":"[url:value = 'http://42.235.52.223:51706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e61af26-a266-c4f2-1019-0000db9c8e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/bin.sh","pattern":"[url:value = 'http://42.233.30.71:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a869601-f9cb-6ca2-80a1-0000d674245a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/i","pattern":"[url:value = 'http://42.238.236.39:56045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e5e8b3-7ce0-f9df-70d1-000075a96a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/bin.sh","pattern":"[url:value = 'http://219.156.112.14:60974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--786ba03e-c4af-5997-8f43-0000aee48975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/bin.sh","pattern":"[url:value = 'http://117.131.92.150:58096/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537a0073-fca5-46f5-871b-000012110bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4","pattern":"[url:value = 'https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4867a0fd-da8a-66b4-0e1f-000034bbed77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/i","pattern":"[url:value = 'http://42.233.30.71:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c82fad-b7f7-ddcc-c2fd-0000a275f974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://smsechodata.cc/run.bat","pattern":"[url:value = 'https://smsechodata.cc/run.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c773e0-e078-3eab-60b1-00005c86e89f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://timelevel12.com/big","pattern":"[url:value = 'https://timelevel12.com/big']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3553cfb-ac66-b905-4556-0000251505a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.251.128:38940/bin.sh","pattern":"[url:value = 'http://182.122.251.128:38940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9feb84-1451-2578-c0fe-0000cf7052ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/i","pattern":"[url:value = 'http://219.156.112.14:60974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d643ce8-5156-277b-3fe1-00006aab1825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.gej.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.gej.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3efe6e-78cf-a8c0-b833-0000fd6172a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/Mozi.m","pattern":"[url:value = 'http://110.38.210.180:57109/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e71a9-2a63-f32e-caab-0000982817e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/loader","pattern":"[url:value = 'http://176.65.139.194/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287f1b29-4234-dc41-0e07-0000aa669fde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/i","pattern":"[url:value = 'http://125.42.255.46:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf36d12-7451-4c0c-e8c0-00001f338420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/bin.sh","pattern":"[url:value = 'http://42.238.236.39:56045/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32a8545-b92f-cabc-b2d4-00001f68affe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/bin.sh","pattern":"[url:value = 'http://203.101.187.5:40888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcca8ccb-49ea-a879-0cc1-0000850bc01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/i","pattern":"[url:value = 'http://123.129.132.69:54242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8571c66d-2ad9-2426-c8cc-00000edb2c3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/bin.sh","pattern":"[url:value = 'http://113.237.104.66:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d34f33-3498-b916-d23b-0000ba60cec7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/i","pattern":"[url:value = 'http://36.36.197.26:60794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f004216-8a31-492e-23b0-00002e92b7f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/i","pattern":"[url:value = 'http://113.237.104.66:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58aa08fc-71df-e21c-b624-0000b6720fbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/i","pattern":"[url:value = 'http://117.131.92.150:58096/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f891f41-a538-09b8-34e3-0000dc10976c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.173.101.30:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.30:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a97c8e-bccc-aa3b-7741-0000335d5e7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1267fa3-602a-1e3e-5dbe-000055e246a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/i","pattern":"[url:value = 'http://203.101.187.5:40888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0e867f-dbcc-867c-deec-000021ba7837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.196.158:47839/i","pattern":"[url:value = 'http://115.55.196.158:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6890956-6248-e9a8-5e17-0000d9e197a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.101.30:46920/i","pattern":"[url:value = 'http://123.173.101.30:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81952ca2-ba7f-3216-b49e-000097dec044","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.35.11:45721/i","pattern":"[url:value = 'http://27.217.35.11:45721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89daee3-9ff0-e399-6980-0000e1e85511","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4d9515-184f-ba51-87bf-0000eac067eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74f0526-47a3-557c-9ac4-000053a2d74f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde74960-3808-1bd8-100a-0000a3740dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd34e8-a4b8-c307-77f1-00002ba1b93a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--821de771-0ff1-4280-a3c7-0000d37c4eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae079f6-ed25-aaa6-35d4-00001bc86ab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2583e4-6d92-3179-4ec9-000001372222","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddb049f-0d39-2c4d-9bde-000077547436","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.11.225:54040/i","pattern":"[url:value = 'http://110.36.11.225:54040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16553036-9182-6335-8560-000010d74f12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/bin.sh","pattern":"[url:value = 'http://110.38.210.180:57109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b39698-ecce-31d6-55ff-0000720563b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:48881/bin.sh","pattern":"[url:value = 'http://156.146.26.225:48881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa18189c-3189-b887-ee59-0000910804cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/bin.sh","pattern":"[url:value = 'http://115.50.178.232:56864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562d3084-7b58-53f6-ce4e-000088d39c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.21.229:35387/bin.sh","pattern":"[url:value = 'http://115.52.21.229:35387/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2152139-df91-c37f-4d7a-00003e8e6a7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/i","pattern":"[url:value = 'http://218.59.109.9:54831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72953a46-410c-1cff-424c-000025ad0d1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.35.47:51278/i","pattern":"[url:value = 'http://125.44.35.47:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a09bad50-3946-66af-fa95-0000e4bee3d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/bin.sh","pattern":"[url:value = 'http://116.53.20.49:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2297f57-66aa-84ac-1431-00007790806c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/i","pattern":"[url:value = 'http://61.53.119.47:53986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a80c84-0158-2cc7-f2c6-000066f2925c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/i","pattern":"[url:value = 'http://120.28.144.161:35460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1285976e-2a3d-80a9-532a-000015edc8e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.204:47447/i","pattern":"[url:value = 'http://182.114.255.204:47447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91129709-d0ca-8cce-9b80-0000361e1325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/bin.sh","pattern":"[url:value = 'http://120.84.212.190:40164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5021dd-b922-ff0e-50b1-000096d3a711","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/i","pattern":"[url:value = 'http://180.191.34.236:49441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0661af34-36c7-49dc-c66c-0000c43ef90c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/i","pattern":"[url:value = 'http://125.40.3.106:41323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdee2692-63ef-4e37-3fc5-00008e8d65a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/i","pattern":"[url:value = 'http://115.56.66.143:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936e955d-8a1a-0b80-cd05-0000362ecade","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/bin.sh","pattern":"[url:value = 'http://115.54.117.199:59554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47be1a6-0c02-dc12-d66f-0000a9310e81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/bin.sh","pattern":"[url:value = 'http://124.161.116.2:53893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cf495f-885d-cdae-11de-0000b9f6072d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/bin.sh","pattern":"[url:value = 'http://116.140.186.83:34139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcf69e1-1bbf-9072-2104-0000e3b2f04d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/bin.sh","pattern":"[url:value = 'http://180.191.34.236:49441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f16aad-8dea-750f-bab1-0000707eca2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/i","pattern":"[url:value = 'http://84.53.221.6:61495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c61815d-acd7-37f7-753b-0000883f0015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/bin.sh","pattern":"[url:value = 'http://182.116.34.137:57791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc97ed0-4a47-02ca-a588-00002afb5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/bin.sh","pattern":"[url:value = 'http://115.50.0.3:52567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b072162-6414-3a49-77bd-0000addedabb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/i","pattern":"[url:value = 'http://72.255.30.244:42024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f2e30e-e8b9-0b26-f7c8-0000d8085b3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/bin.sh","pattern":"[url:value = 'http://182.119.15.73:52944/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--888208ab-dd55-b78b-22a9-0000ea349fa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.161.119:46353/i","pattern":"[url:value = 'http://222.140.161.119:46353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6ac967-a60c-6519-3d45-00000eb17c97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/bin.sh","pattern":"[url:value = 'http://61.52.159.43:42655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d5dc2c-7d40-e218-30ef-00001e15562a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.42.15:52214/i","pattern":"[url:value = 'http://180.191.42.15:52214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa26683d-2eb0-6a2f-c64f-0000a7ec57c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.131.83:45094/i","pattern":"[url:value = 'http://125.46.131.83:45094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a822146b-36f6-c7e7-2524-00004b3af776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/i","pattern":"[url:value = 'http://115.50.178.232:56864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb29c64f-bc46-617a-77a5-000050a2674c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.118.24:44651/i","pattern":"[url:value = 'http://105.186.118.24:44651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--157023fc-7606-c5ac-9c44-0000a604c952","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/bin.sh","pattern":"[url:value = 'http://219.157.34.223:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a493ebce-ad88-438e-3f1b-0000bbcb1699","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/bin.sh","pattern":"[url:value = 'http://182.114.192.77:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8879619-e68d-9ed1-c64d-0000b346e6a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/bin.sh","pattern":"[url:value = 'http://222.140.216.179:36444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462b2d73-bb66-60cb-15ce-00002e57304e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/i","pattern":"[url:value = 'http://222.140.216.179:36444/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152ea14f-5811-73ef-9d54-0000e47a0f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.235.69:41594/i","pattern":"[url:value = 'http://60.23.235.69:41594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50eeebc-f3e5-1d07-e159-00001f77b14a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://146.158.4.238:41633/i","pattern":"[url:value = 'http://146.158.4.238:41633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b78b7a-2f0e-b01b-8132-00002062cf1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.86.30:45927/i","pattern":"[url:value = 'http://125.40.86.30:45927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d200e1-1052-f221-b416-0000348b4c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/bin.sh","pattern":"[url:value = 'http://112.113.101.43:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f9b757-a75b-08fa-3c6f-0000f2600f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.45.111:57854/i","pattern":"[url:value = 'http://182.113.45.111:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595a31-0dc8-9086-3c63-0000833c963a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/i","pattern":"[url:value = 'http://182.116.34.137:57791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83254d7-8a59-c8b7-baf8-00006ab0af23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/bin.sh","pattern":"[url:value = 'http://115.57.30.45:34814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84543a72-84a5-d769-cda4-0000eaacb280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/bin.sh","pattern":"[url:value = 'http://61.53.119.47:53986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb043a-3cc5-e4f2-df27-0000b550fbc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/bin.sh","pattern":"[url:value = 'http://219.155.73.196:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8179c3d5-c5b4-7185-488e-0000b63affe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/bin.sh","pattern":"[url:value = 'http://182.126.113.147:53111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c889f5-4f1d-a3f0-5375-000038879df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.207.151:52550/i","pattern":"[url:value = 'http://110.38.207.151:52550/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c45330-1e77-7123-c1b6-0000dd82a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/i","pattern":"[url:value = 'http://219.157.34.223:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a18168-d8cf-ca45-5737-000031fbe512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/i","pattern":"[url:value = 'http://182.121.244.13:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36c6fd6-61d3-35dc-b6b6-0000db135694","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.227.14:47543/i","pattern":"[url:value = 'http://125.41.227.14:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0fa25c-0815-b016-0f08-00009d5e517b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/bin.sh","pattern":"[url:value = 'http://36.70.226.107:53300/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc079a9b-d914-7355-60e0-000010fae530","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/i","pattern":"[url:value = 'http://118.173.224.60:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f368f107-b350-a8c1-b284-0000bff76a4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/i","pattern":"[url:value = 'http://115.63.145.245:55982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1448ff7-3e36-aaac-3886-000089572107","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/bin.sh","pattern":"[url:value = 'http://37.157.219.158:39929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5f0201-684b-e07e-8342-00003c5601f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/i","pattern":"[url:value = 'http://115.57.30.45:34814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff1d3c-cce3-81e1-e831-00000b69da83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/i","pattern":"[url:value = 'http://123.13.80.50:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5ba162-c7fb-5043-f38b-0000f4805f8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.34.92:60244/bin.sh","pattern":"[url:value = 'http://42.6.34.92:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd482b8-822b-14f3-6d65-0000b730064f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/bin.sh","pattern":"[url:value = 'http://42.239.179.192:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f722d085-32e1-72f4-5f41-000047d018c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.78.154:48079/i","pattern":"[url:value = 'http://123.11.78.154:48079/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7976fa3-94d0-9014-8afc-0000a346d7df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/i","pattern":"[url:value = 'http://27.37.101.72:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a1ff41-cc99-10b6-52b8-0000b7dbcc32","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/i","pattern":"[url:value = 'http://210.208.111.36:53831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447d95b8-86d9-4ce1-6dcd-00001db9999c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/bin.sh","pattern":"[url:value = 'http://182.118.246.94:39103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf13f736-cb4d-5862-fd16-00000bd3eae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/i","pattern":"[url:value = 'http://37.157.219.158:39929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2595ed0-2acf-67b0-875f-00004f70e9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/i","pattern":"[url:value = 'http://219.156.20.248:59087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bcd3eb-ae87-6366-c1f9-0000390313c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.74.117:55662/i","pattern":"[url:value = 'http://61.53.74.117:55662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01083f6e-1993-0ca0-7c8e-0000e03a018b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/bin.sh","pattern":"[url:value = 'http://125.45.66.165:50850/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e480807-9531-f284-c8a2-000041e7108f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/i","pattern":"[url:value = 'http://125.45.66.165:50850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a10e85b-e2f4-0fe4-a8b5-00001f8fed35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/i","pattern":"[url:value = 'http://220.177.11.228:55723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ab6cab-c272-ab16-26b4-0000a917a94c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/bin.sh","pattern":"[url:value = 'http://120.28.144.161:35460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af82da97-d7f3-46ed-43ca-0000744b24ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/bin.sh","pattern":"[url:value = 'http://118.173.224.60:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43f8dd4-6cee-7885-558d-000046bd13dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/i","pattern":"[url:value = 'http://42.87.163.211:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe50a37c-e3f4-fa31-5c64-000047dc6aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/i","pattern":"[url:value = 'http://117.26.83.196:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108c5658-c5bf-dd92-ea4d-00009e360f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/bin.sh","pattern":"[url:value = 'http://42.87.163.211:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95acf24-4bb9-d6fa-db0c-00000ceed800","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/i","pattern":"[url:value = 'http://61.53.110.220:49686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5becad-bc00-0514-2a11-00002ba4bf3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.162:42966/i","pattern":"[url:value = 'http://182.118.241.162:42966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--948cbdcf-efcf-d79f-2abb-0000dbe08bb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/i","pattern":"[url:value = 'http://115.50.0.3:52567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2454fbdd-d3b6-5ef9-f465-0000ea694e72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.176.10.219:58446/bin.sh","pattern":"[url:value = 'http://60.176.10.219:58446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60c1142-599f-1c79-5949-0000dd0773ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/bin.sh","pattern":"[url:value = 'http://123.13.80.50:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c5ae3c-195a-39ee-e7c7-0000028dfe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/bin.sh","pattern":"[url:value = 'http://46.236.65.163:51558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e43fc18-b433-4e0c-a9eb-0000b19f0973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/i","pattern":"[url:value = 'http://61.52.159.43:42655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8caae4f-138f-f94e-96ba-0000c4853542","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/bin.sh","pattern":"[url:value = 'http://112.198.238.18:53312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c20e1d-deb9-b311-7565-00000b61fb08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/bin.sh","pattern":"[url:value = 'http://222.142.252.116:35588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82704b3-5383-eb81-67e7-0000f2087560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.204.30:46437/i","pattern":"[url:value = 'http://123.11.204.30:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b9b5f-1899-4deb-8488-00008b46b693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/i","pattern":"[url:value = 'http://112.198.238.18:53312/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10892792-da31-f6be-9cd9-00004440a0c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/i","pattern":"[url:value = 'http://182.114.192.77:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1080435f-e348-449d-3acc-0000a57ab3d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/i","pattern":"[url:value = 'http://66.212.173.225:35221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6afc56-6bb1-8777-dae2-000089293126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.53.155:43350/i","pattern":"[url:value = 'http://125.44.53.155:43350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28acbc61-0d67-647c-f909-00002a73eae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/bin.sh","pattern":"[url:value = 'http://61.53.110.220:49686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a8fc15-fe20-9ad5-6bf8-00008e9fa176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/bin.sh","pattern":"[url:value = 'http://115.48.146.252:57987/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff527d-fd57-c9b2-dcfb-00000dd06ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/i","pattern":"[url:value = 'http://123.9.41.95:38149/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfaf264b-0a86-5353-29d5-00000d0e1a0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/bin.sh","pattern":"[url:value = 'http://125.42.255.46:55570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a79912-a40a-4099-72c3-000003e53529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/bin.sh","pattern":"[url:value = 'http://210.208.111.220:46346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94cb6b3a-7d85-ce1b-52b6-000057358c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/i","pattern":"[url:value = 'http://113.239.221.126:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f7dcfd-4b0f-f160-5b9e-0000473e4898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/bin.sh","pattern":"[url:value = 'http://113.239.221.126:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a14ec2-a5ff-9f39-6453-0000a976f65d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.94.37:45880/i","pattern":"[url:value = 'http://175.147.94.37:45880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e224da17-12bd-fbb3-602c-0000aacb39fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/bin.sh","pattern":"[url:value = 'http://84.53.221.6:61495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619dfa6d-9cef-07b1-c269-0000d494fb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/i","pattern":"[url:value = 'http://222.142.252.116:35588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a7f7bc-b451-de62-13cc-00002b7d037c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/i","pattern":"[url:value = 'http://175.174.110.158:47459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a8404d-0015-8905-b914-0000a4403fa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/bin.sh","pattern":"[url:value = 'http://115.61.242.68:50097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebda5098-8d98-c875-cba6-0000dbcbca93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/i","pattern":"[url:value = 'http://182.126.113.147:53111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e1d626-09bf-e4a8-51df-0000c8d9cf43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.231.77.43:2715/i","pattern":"[url:value = 'http://121.231.77.43:2715/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc48044-bfe7-b7ea-eef2-0000246ffe9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.66.162:41960/i","pattern":"[url:value = 'http://182.121.66.162:41960/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a63606-263e-f78c-00e7-00004652aed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/i","pattern":"[url:value = 'http://115.61.242.68:50097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fdbdcc-12d2-92f6-bbfb-0000fea474a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/i","pattern":"[url:value = 'http://120.84.212.190:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5c6d32-8a4e-3dfa-bf07-000061177c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.159.233:46480/bin.sh","pattern":"[url:value = 'http://222.140.159.233:46480/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd4212d-9c03-81bb-4a3d-0000c9c293bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/i","pattern":"[url:value = 'http://112.113.101.43:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6521ea5c-2e25-1585-a3ce-000079289927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/bin.sh","pattern":"[url:value = 'http://115.56.66.143:59123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67e3659-fb3d-d167-120a-0000a9ba9d69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.253.241:39307/i","pattern":"[url:value = 'http://113.239.253.241:39307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab11b30-d40a-7011-eac2-0000c54de824","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/bin.sh","pattern":"[url:value = 'http://39.78.26.151:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66fdb1a5-813e-4732-4b46-00001517cb1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.135:36545/i","pattern":"[url:value = 'http://120.84.212.135:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba27a654-5bf9-e2a5-640e-0000c2946d7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/bin.sh","pattern":"[url:value = 'http://175.174.110.158:47459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1b2897-3cfe-cc21-a2fd-0000db128cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/i","pattern":"[url:value = 'http://115.48.37.12:47625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f10a15-aa91-7b49-5363-0000dece0eb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/bin.sh","pattern":"[url:value = 'http://110.36.75.82:45777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb30da8-eeb9-a9ee-123b-0000c4dbd5d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/i","pattern":"[url:value = 'http://125.41.72.148:43605/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a19203-037a-4b43-3c0d-000014968035","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/bin.sh","pattern":"[url:value = 'http://113.228.208.46:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0eda54-8d32-6496-d19b-000003acc35e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/i","pattern":"[url:value = 'http://110.36.75.82:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ec170c-fa95-1d35-5016-0000515396bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.168.51:58015/i","pattern":"[url:value = 'http://182.121.168.51:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8e75be-4e97-70d4-0388-000063feb58c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/bin.sh","pattern":"[url:value = 'http://45.194.25.221:36557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448411aa-196b-9764-ace7-00009995f975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.187:38525/i","pattern":"[url:value = 'http://163.142.93.187:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4533d5-4472-5dd9-3efa-00008de962c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/i","pattern":"[url:value = 'http://45.194.25.221:36557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167238fb-24a4-f2fb-f351-0000e4737562","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/bin.sh","pattern":"[url:value = 'http://39.89.94.52:43636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad96e195-8a87-8c0f-f881-000051a7cbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/bin.sh","pattern":"[url:value = 'http://212.164.115.235:52521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bdcbd07-e2d2-a442-976a-00002f371d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/i","pattern":"[url:value = 'http://39.89.94.52:43636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ffe2ab-a387-4277-c91b-0000601189f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/i","pattern":"[url:value = 'http://210.208.111.2:53561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7461b67-2fe2-6241-8cd9-00008f67b7e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/i","pattern":"[url:value = 'http://182.119.15.73:52944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35843c0c-3624-fdec-ef95-0000644a8239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/i","pattern":"[url:value = 'http://212.164.115.235:52521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b199f08-06f8-fea9-134f-000068d72a48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/bin.sh","pattern":"[url:value = 'http://112.226.200.149:34560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dd596e-ace9-baec-3b19-00002524ebf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/i","pattern":"[url:value = 'http://112.226.200.149:34560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6594a6fd-c2d7-40d8-d0d7-00004655e97a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.17.244:47351/i","pattern":"[url:value = 'http://123.12.17.244:47351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac28673c-3e4a-fc20-3280-0000c60e0c6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53fd8bf-8539-8f76-abd5-0000c5f39e4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/etc.exe","pattern":"[url:value = 'http://178.16.54.109/etc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc80f0-98a8-3689-d443-0000e8e3205b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.54.164:35591/bin.sh","pattern":"[url:value = 'http://175.146.54.164:35591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7273a15-b460-c907-7720-00006e384fd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/bin.sh","pattern":"[url:value = 'http://115.63.8.145:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac82399e-b769-d6e3-fd10-00000ec9bf4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/bin.sh","pattern":"[url:value = 'http://42.53.241.188:49853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b3b4c0e-b3e6-03a8-ca5a-0000132f81f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/bin.sh","pattern":"[url:value = 'http://115.48.37.12:47625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3efcb7-a41f-4dc3-0a98-00004d0f1eef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/bin.sh","pattern":"[url:value = 'http://125.41.72.148:43605/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae58635-bb51-5871-caef-00006b6f4bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/i","pattern":"[url:value = 'http://115.63.8.145:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e3223a-beaf-cf1f-a784-0000433bd0de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/i","pattern":"[url:value = 'http://222.141.22.9:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a5da49-1b61-b3b5-751d-0000565689fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/bin.sh","pattern":"[url:value = 'http://210.208.111.2:53561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5517ccf-b093-d0e0-762e-0000f163c3ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f80b7c69-bfb9-740d-8eb2-0000a7285a8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd439fc-5b06-0018-006b-0000c7925452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb3d788-21d4-aec9-467b-00008741bec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/bin.sh","pattern":"[url:value = 'http://27.37.101.72:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca01b384-77b3-8163-1d52-0000aaa53bd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/bin.sh","pattern":"[url:value = 'http://175.148.157.219:53297/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97a3744-9297-588b-d3c3-0000a332585d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/i","pattern":"[url:value = 'http://175.148.157.219:53297/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c87b241-054f-1ff1-8e8a-00002001787c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.91.36:41931/i","pattern":"[url:value = 'http://119.165.91.36:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef65f483-3653-9ac0-c23b-00005a0d51f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.155.7:34948/i","pattern":"[url:value = 'http://119.189.155.7:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca8e376-8f85-8761-c1dd-00000954da75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.sh4","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9628aae4-1c2c-d20a-037e-00003bc0c1dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944830ef-41ce-82c5-4fe9-0000f1892df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f6bd07-a9c1-b601-59fe-0000f48cd4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86_64","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc308eb-180e-d89e-2d37-00009b756350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm5","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbcbf78-85aa-a5d6-a66e-00000f1e312d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.spc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fa0121-af4f-0dde-6d35-0000898a4383","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.ppc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53cd69c7-2e50-9db6-f6bb-0000317cabdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm7","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719087e3-bae4-eef8-ee7f-0000db1fb6ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9947ad-49ce-abbd-60e8-0000133d7974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.m68k","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5121fdb3-d1f6-7db9-64ba-0000de158a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.i686","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b5737b-57ec-36e9-5a33-000013cbafae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mips","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3267b5b2-9293-a555-07ff-000078c8c1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mpsl","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ca5951-089c-837f-9bf8-000089c0ccbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm6","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af86d14c-8924-4e53-3aff-0000110ee3ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp.exe","pattern":"[url:value = 'http://196.251.107.186/clp.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f629fec8-49ae-6aed-24e6-0000a347d6ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/get.sh","pattern":"[url:value = 'http://103.77.246.150/get.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80426e6-ae2d-0474-95b1-00009daaae49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/zs64.exe","pattern":"[url:value = 'http://196.251.107.186/zs/zs64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cac3fb-29d0-7302-a799-0000d68176f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/3.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00511b1-4504-b99a-6763-0000135906a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/144.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d08568-24f8-222d-6a15-000072956184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.8/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01cff90-21ae-8c95-16d7-00008e405c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884bc92e-d6a0-cf28-f746-00003d93dad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.28/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81773290-f1ad-c4b5-7ce3-00002a744d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3174c9a-9916-39eb-7730-0000dbedfdf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.107/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c8009d-3856-ad18-381b-0000940224ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35378c31-9dcf-50c3-12ae-0000fe54b874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/i","pattern":"[url:value = 'http://36.88.136.194:37137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4d9371-3f38-11a7-b70c-0000f344a313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/bin.sh","pattern":"[url:value = 'http://36.88.136.194:37137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf0bdf04-93bb-f3bb-e2a6-0000620dede5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/bin/support.client.exe","pattern":"[url:value = 'http://104.249.10.175/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323edc9f-f762-77b7-7e01-0000eed52de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc87503-3545-6906-0cc5-000031c73c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633b7b8a-a799-67c3-2bc2-000065149282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.25/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c95abc-508f-12fb-ac9a-00009ade8d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4beab2d-b55e-1a9c-53b4-0000a5c96b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/i","pattern":"[url:value = 'http://182.126.80.97:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e9b468-28ff-3cb4-62fc-0000ebcdee61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ca2e31-aee6-9efe-4821-0000a169e893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/bin/support.client.exe","pattern":"[url:value = 'https://104.249.10.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8975431-fc4d-5dae-074c-000061635446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.141/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64f2279-1d09-8266-2e81-0000ee870c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30efdb44-9036-df55-0b41-0000d19c83bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.162/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0cb30b-3124-3820-4d94-00003e7d1bb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35260f9a-1de4-30f8-996c-00005167e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/bin.sh","pattern":"[url:value = 'http://182.113.219.69:59860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbe7d2a-7852-b6a5-ed0b-000077e41f65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/i","pattern":"[url:value = 'http://182.113.219.69:59860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3c51d1-a5fe-fa0d-e70f-0000f4f20aa7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/Services.apk","pattern":"[url:value = 'http://94.154.43.74/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96757f9d-3ac2-4bde-3321-000089758e11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/persist.arm7","pattern":"[url:value = 'http://94.154.43.74/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6703b685-46ea-4348-8ea3-0000381ec426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/bin.sh","pattern":"[url:value = 'http://42.59.237.57:55244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eddbd29-affa-3cb6-b429-00006ae34603","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/i","pattern":"[url:value = 'http://182.114.196.132:39255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823e2ff9-e8e9-f5e2-3f08-00009d1e28b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/bin.sh","pattern":"[url:value = 'http://113.237.71.75:38677/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41401d4b-a525-7176-987a-000001090a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/i","pattern":"[url:value = 'http://113.237.71.75:38677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c277c10-893c-56e0-ff14-0000ced06543","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.110.9:42389/i","pattern":"[url:value = 'http://182.127.110.9:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c33b0-376d-4fb0-7fc9-0000ea2ca255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.37.62:48034/i","pattern":"[url:value = 'http://115.59.37.62:48034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--143637ec-b21a-e28e-b5b2-00000b3359d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/bin.sh","pattern":"[url:value = 'http://182.114.196.132:39255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec4d5e-8712-85f5-09fe-00007e3fd95c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/bin.sh","pattern":"[url:value = 'http://45.170.224.217:54350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184daebf-a4e4-8c86-c501-0000029d50d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/i","pattern":"[url:value = 'http://45.170.224.217:54350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df89fa8-45da-36f4-c337-000066a2a5d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.169.99:44901/i","pattern":"[url:value = 'http://115.50.169.99:44901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1293e3-cfcf-9c2f-0081-0000f60783f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/bin.sh","pattern":"[url:value = 'http://123.14.176.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b8846a-d9ee-a30d-9443-00002b636d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/i","pattern":"[url:value = 'http://123.14.176.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f0eb01-905b-4442-5591-0000f583f751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie_sh4","pattern":"[url:value = 'http://103.226.250.88/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a140b488-b15b-0b93-9a9f-0000ed25251b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_sh4","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1874269-5fb6-2ad2-8724-000002e38ed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86_64","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41256df-8ef9-f915-aaa4-00006dfbbced","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_ppc","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f170e1-f885-5175-4c4d-0000b9d344d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_m68k","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea26e1d-2cb0-c895-bfae-0000232ef11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm6","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a55e8b-0a76-9ba6-0215-00009b92967b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm7","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c78d01d-2384-5fd5-6f76-00003f6e4980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ab3fa7-d05c-53b9-b78a-0000319b5ef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm5","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a06711-d34c-e413-0e2a-000015f8d298","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c33b67-6419-4a49-6b8f-00008731e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie.sh","pattern":"[url:value = 'http://103.226.250.88/onie.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680f82fe-dc64-97a6-6fbc-0000d226fc44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mpsl","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd4437-f4dc-f44a-cab7-0000b925920e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mips","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3e8198-d76b-7d61-fd12-0000e48f18a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.24:55996/i","pattern":"[url:value = 'http://175.148.156.24:55996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7980f-283e-267a-f6ae-000078dc7508","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79cacbcc-acad-c3dc-8c03-00003f7c0fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11adac4a-6b8e-5032-623e-000023ae6119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.233/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4a394e-2060-33f2-6f8a-000016ffc0cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.233/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5da7be-a26d-c025-12ac-0000cf2a91f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.233/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073bbdd9-803a-446a-6a02-0000964e72c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfca94e-d969-8495-8e37-000045bc5cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464edc8b-7263-9497-5998-0000a5ff570d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.233/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d1fa8d-ded5-3c8e-04a4-0000021c2668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe7293f-5795-742e-54eb-0000a1690f9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mips","pattern":"[url:value = 'http://176.65.139.233/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cb1de9-5a09-9b19-e0d2-0000a19fd946","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.233/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ca70dc-b5bc-1a9b-824f-0000246bdb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.arc","pattern":"[url:value = 'http://176.65.139.233/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a369f4-678e-b636-f6ad-0000bd5bbcfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af77399-fb2d-3974-8ae0-0000217f8b21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.i486","pattern":"[url:value = 'http://176.65.139.233/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024724a8-10b2-973d-6a84-00003a4d7ce1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/a.sh","pattern":"[url:value = 'http://176.65.139.233/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dcb422b-4545-e01b-45b4-00000e97da9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/bin.sh","pattern":"[url:value = 'http://42.230.30.16:36416/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f6ae85-ecea-c18d-2472-000077d25a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/i","pattern":"[url:value = 'http://42.53.241.188:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1ed4c2-4976-9fed-41f9-000079063ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.194.151:33197/bin.sh","pattern":"[url:value = 'http://124.94.194.151:33197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34983501-9f56-dbeb-f766-0000a951f66d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8722997249/utRRFWX.exe","pattern":"[url:value = 'http://62.60.226.140/files/8722997249/utRRFWX.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3716d1ea-cc89-f843-1990-00003cf451e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.162.199.149/uploads/cl1786993325592.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669466-5fe6-45e2-8c36-000009d079d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/bin.sh","pattern":"[url:value = 'http://180.191.122.115:57936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd49685-260e-45e2-0c86-0000b52da72b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/i","pattern":"[url:value = 'http://180.191.122.115:57936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368c1f7b-14bf-a4dc-1eea-0000858603bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/bin.sh","pattern":"[url:value = 'http://210.208.110.51:48541/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b62c3a5-9767-b15b-6388-000068ae5e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/bin.sh","pattern":"[url:value = 'http://123.189.139.234:49221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0702f57f-5e13-7896-0f20-00002c1e1e10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/bin.sh","pattern":"[url:value = 'http://125.44.52.238:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4521ab-eb4e-8694-a8ed-0000ab72572c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.188.143.100:53340/i","pattern":"[url:value = 'http://14.188.143.100:53340/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a73f4b7-2bdb-3e89-4e43-00008dbba94e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/i","pattern":"[url:value = 'http://42.230.218.53:49708/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c207be20-318f-03ab-23c0-000028191519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/i","pattern":"[url:value = 'http://115.48.150.119:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8ca9df-c7d4-280e-79aa-0000e968ff34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/i","pattern":"[url:value = 'http://210.208.110.51:48541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8c8f9c-0fdd-673b-f8ac-0000586a4f3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/i","pattern":"[url:value = 'http://125.44.52.238:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112f5ee5-732c-f2de-75bf-0000d4b61a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8714097194/VicVgdL.exe","pattern":"[url:value = 'http://62.60.226.140/files/8714097194/VicVgdL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6fd406-eb14-435f-a364-0000c8a24532","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/i","pattern":"[url:value = 'http://123.189.139.234:49221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ee2dd8-9031-f718-bdce-00001074b4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/i","pattern":"[url:value = 'http://182.117.76.70:54885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf571c83-a16f-36d3-a0d3-0000047d79c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/bin.sh","pattern":"[url:value = 'http://60.18.25.174:34688/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799c65a1-7405-3d08-2011-0000cdff320d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/y","pattern":"[url:value = 'http://154.90.70.23/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c3fe37-b342-54f5-0e74-00005d00e9da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/bin.sh","pattern":"[url:value = 'http://36.36.197.26:60794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c70e69-b38c-fa17-e8a7-000028f3cf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/bin.sh","pattern":"[url:value = 'http://123.13.83.90:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270adbb9-5fe0-2282-e1c4-0000bce075dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/bin.sh","pattern":"[url:value = 'http://115.50.6.146:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d1bfdc-0d2b-5718-5959-0000e26cd91d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/i","pattern":"[url:value = 'http://123.13.83.90:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81efb0d1-c976-21ba-848d-0000ac4d4b79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/i","pattern":"[url:value = 'http://60.18.25.174:34688/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66db52aa-3a69-8200-fa5b-0000b915a9f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.5:47999/i","pattern":"[url:value = 'http://42.224.101.5:47999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79fa513f-bdf0-bad1-d57e-00002589906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/bin.sh","pattern":"[url:value = 'http://42.235.36.124:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1cb75c-50a7-4825-6ff0-00002e55f6a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/i","pattern":"[url:value = 'http://115.50.6.146:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b73513-0d61-f5d0-144c-00001d22bcd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/bin.sh","pattern":"[url:value = 'http://179.108.89.220:33758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b39b13-28c7-e482-83d9-00002acbe9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/bin.sh","pattern":"[url:value = 'http://61.137.195.76:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377d5b1-389c-5bf5-0e9a-000002c404df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/bin.sh","pattern":"[url:value = 'http://115.57.84.167:36341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff189c4-9bda-4ff1-be9d-0000422b9ae5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/i","pattern":"[url:value = 'http://115.57.84.167:36341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a9dafc-04be-0eeb-b2be-00009c75f94b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/bin.sh","pattern":"[url:value = 'http://27.204.195.189:48250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e027f2e4-7686-0505-b476-0000d91d0b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/i","pattern":"[url:value = 'http://219.156.62.179:56519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d126dd-e29b-7d93-b6df-0000432d82af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/bin.sh","pattern":"[url:value = 'http://219.156.62.179:56519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d3ba277-9f43-2cdd-fb44-000088f20c49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/i","pattern":"[url:value = 'http://27.204.195.189:48250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c309bbf1-2b8b-840b-6043-00003e9d935d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/i","pattern":"[url:value = 'http://179.108.89.220:33758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f106c33f-06e0-ab28-86ec-0000d2f5c64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/i","pattern":"[url:value = 'http://124.131.167.151:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56798f83-ff7f-160d-296b-000082c7ad3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/bin.sh","pattern":"[url:value = 'http://115.48.150.119:50908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76299329-790e-8eea-133b-0000db347902","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.178.37:40893/i","pattern":"[url:value = 'http://61.52.178.37:40893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb701616-def3-ac3d-381f-0000a0405e3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4c6cbc-89f9-1b65-f469-00008e106b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.178.134:49781/i","pattern":"[url:value = 'http://105.225.178.134:49781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b0ba4d-0b20-3275-a66e-0000597faed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/bin.sh","pattern":"[url:value = 'http://123.12.154.116:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9dc022-3762-bae2-352c-00008afbefa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/i","pattern":"[url:value = 'http://124.6.168.74:46806/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea2d499-738a-a3e3-75da-0000db380440","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/i","pattern":"[url:value = 'http://123.12.154.116:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73332173-c048-643e-fc58-0000918ee721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/bin.sh","pattern":"[url:value = 'http://42.224.197.166:47521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9726233-406d-bdf5-593a-00003b9b07ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/i","pattern":"[url:value = 'http://42.224.197.166:47521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b9ca964-4513-26ac-5843-00003dd4fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.38.148:40790/i","pattern":"[url:value = 'http://113.221.38.148:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e834aa-b659-e812-8c69-0000356204f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/bin.sh","pattern":"[url:value = 'http://175.150.250.245:59676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee07809-9c49-0acf-0cdc-0000bc4b6fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.136:45066/i","pattern":"[url:value = 'http://182.117.68.136:45066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb29f73a-814d-cef8-c664-0000c4c5ca35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/TispciphraLoader.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/TispciphraLoader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292d02e8-a85a-8476-4084-0000246efa68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/i","pattern":"[url:value = 'http://175.150.250.245:59676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3435b3fc-b294-dfe5-f4ed-0000d1f3f676","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/bin.sh","pattern":"[url:value = 'http://180.190.85.135:37478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7015996-988f-e461-056f-0000119657b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/i","pattern":"[url:value = 'http://219.155.195.226:55894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e134b516-0d48-fa15-7a07-000054db34c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arc","pattern":"[url:value = 'http://45.133.74.161/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3542f1d-9499-9034-6c64-00009e92d8ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86","pattern":"[url:value = 'http://45.133.74.161/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e5729c-454a-0c2c-3a33-0000cd1609bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/i686","pattern":"[url:value = 'http://45.133.74.161/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b677bad-7869-8fc1-bbc9-00003acbdf40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/pay.xml","pattern":"[url:value = 'http://45.133.74.161/pay.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aed481f-03ca-2eec-6f03-00000517fa71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86_64","pattern":"[url:value = 'http://45.133.74.161/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770ed67e-4fbb-8005-1260-00009ac34f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm6","pattern":"[url:value = 'http://45.133.74.161/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--068c9811-7287-2c52-df4a-0000b40443f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm","pattern":"[url:value = 'http://45.133.74.161/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca0a08a-c83d-2cbe-fc21-00006005c435","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/spc","pattern":"[url:value = 'http://45.133.74.161/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0009e6e8-468e-bac6-1021-0000227f2878","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm7","pattern":"[url:value = 'http://45.133.74.161/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a4e8c4-8ca7-567e-d35d-000025cc6550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/persist.arm7","pattern":"[url:value = 'http://45.133.74.161/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d471fc54-eb89-2344-b29c-000000c82c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mips","pattern":"[url:value = 'http://45.133.74.161/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a33a9d-f06d-ee98-3409-00006bcb4247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mpsl","pattern":"[url:value = 'http://45.133.74.161/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985dc882-37e2-928e-d595-0000003efad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/m68k","pattern":"[url:value = 'http://45.133.74.161/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0787c4-08e3-7690-9a3a-00008876e0f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm5","pattern":"[url:value = 'http://45.133.74.161/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb4fc84-6b94-0c7a-d506-0000664f2f6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/sh4","pattern":"[url:value = 'http://45.133.74.161/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee61ed3-c54d-1d16-e9c4-0000e691b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/ppc","pattern":"[url:value = 'http://45.133.74.161/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b530c37f-72f5-8b53-bcab-00006dd5de57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/i","pattern":"[url:value = 'http://180.190.85.135:37478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dedc688-9e31-f043-9dcc-0000584be1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/Services.apk","pattern":"[url:value = 'http://45.133.74.161/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba2d757-60c3-92f9-9dc4-00006b24ec3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:52495/i","pattern":"[url:value = 'http://117.146.92.46:52495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d38c62-eccf-b185-77d7-000037c90ecc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/bin.sh","pattern":"[url:value = 'http://162.255.251.91:37737/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95643844-64fc-1312-9f59-0000dea5799d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/bin.sh","pattern":"[url:value = 'http://182.117.76.70:54885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82485bef-12c5-359c-f04b-000077809f8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.156.30:49683/i","pattern":"[url:value = 'http://115.56.156.30:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d416d46-8c72-dcc5-35d5-000051e9d00d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/bin.sh","pattern":"[url:value = 'http://221.15.8.180:46594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb18424-aad9-cf0f-2307-000028bb75eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/i","pattern":"[url:value = 'http://221.15.8.180:46594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c41e55-9e51-828c-d523-0000d6499014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/bin.sh","pattern":"[url:value = 'http://123.11.72.60:34472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1132202-df34-02fb-de76-0000d4fe968f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/i","pattern":"[url:value = 'http://162.255.251.91:37737/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50480f4c-01e6-39f2-58a5-00007269e437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/i","pattern":"[url:value = 'http://123.11.72.60:34472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cd86-1b54-aa1f-48f0-0000ec490e8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/i","pattern":"[url:value = 'http://42.237.34.160:35437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae573e15-4363-7e72-2f93-00005a51fbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/i","pattern":"[url:value = 'http://182.126.119.188:36580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f12b56-40d5-1634-5de0-0000208d288a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/bin.sh","pattern":"[url:value = 'http://182.117.179.242:55011/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2b82ca-ad77-f104-b35b-0000cd4755cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/i","pattern":"[url:value = 'http://182.117.179.242:55011/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6820f255-d70e-ab4f-b191-000083e50a6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/i","pattern":"[url:value = 'http://112.198.239.2:34176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d0a153c-bdd8-bbbb-6712-00000e67561d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.21:54646/i","pattern":"[url:value = 'http://210.208.110.21:54646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e1e527-39e6-c51f-45d1-00003d70c015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe","pattern":"[url:value = 'https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6ac4eb-3427-a91e-9bc0-00005330e04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.38.203.20:51099/i","pattern":"[url:value = 'http://39.38.203.20:51099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe959b-ee8a-25f3-96f8-000025dff200","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58a6a58-bd90-eeb2-64d1-000004a6d360","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b566e4-9c4c-e043-6a51-0000d231b6b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.mixierealty.com/wp-content/bin.exe","pattern":"[url:value = 'https://www.mixierealty.com/wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50c586-77a8-dff9-d6ef-0000cc2850ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://bserail.com/cabin/Diocle.emz","pattern":"[url:value = 'http://bserail.com/cabin/Diocle.emz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25aa73f-451f-d917-cea8-0000b1b97505","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836aeee0-1904-572e-13a7-0000300ec3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b6da97-5a40-32d9-da28-000055ffd0f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/huawei","pattern":"[url:value = 'http://31.77.227.102/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7876738e-e689-47fc-46c4-0000a2a98d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/bin.sh","pattern":"[url:value = 'http://123.4.243.157:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302a019a-6c15-88ef-c885-0000c652802f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab83b64-8674-96f5-a97b-000042a0f28e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.spc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58fe853d-89a2-cc9d-0c6d-0000c4348020","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2687ed79-8cd8-51b3-cf06-0000375a8d75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dac676a-dc07-4812-d729-000044ea19d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9235020-6a5e-5ee2-a2ea-0000d4e72fc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df791f66-3252-e3b2-4edf-00005caf35e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472d310c-0768-d231-1b38-00007eeee74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2298f84-cdcb-0bf3-044f-0000ece3eae8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.spc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdb6caa-001d-7f13-b8ca-0000f8d0b290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.m68k","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098123ec-11b9-4748-0103-00007098a8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm5","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60b66c2-322f-6bcc-e5a1-0000c22812ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86_64","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78f42c0-e6dd-0106-a66c-0000da91603f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm7","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3805b71f-2f9b-9b7a-3684-000038e26d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86259eb5-2fb9-6097-944f-000093250a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mpsl","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dd38a-83d7-123c-829e-0000eaa901b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.sh4","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd0013-9c7f-ca9b-a59c-00001274f633","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06f31dd-3d30-f69a-3e7f-00006a779846","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.ppc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90887256-e022-235e-956e-0000622d075a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm6","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f7587c-92e0-1980-8ce7-0000f826644a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mips","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85526f7-50f7-7c7e-d461-00009c22066c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.aarch64","pattern":"[url:value = 'http://31.77.227.119/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce00a23-60fb-2d97-d33e-00009498b779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.powerpc","pattern":"[url:value = 'http://31.77.227.119/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--429021c6-2b76-f378-e765-00001dc429b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mipsel","pattern":"[url:value = 'http://31.77.227.119/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6157d3-e4ac-10ab-f597-0000b4f654a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv5l","pattern":"[url:value = 'http://31.77.227.119/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff87a98-87ec-3598-0c3f-000061c0477b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.arc","pattern":"[url:value = 'http://31.77.227.119/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5f9ebc-824f-cd5e-8422-00002c24a9f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mips","pattern":"[url:value = 'http://31.77.227.119/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff63ba1-cc7d-7c58-f50a-000044a0ca87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.x86_64","pattern":"[url:value = 'http://31.77.227.119/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257a6692-16e2-02ee-7e67-000089967d16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv4l","pattern":"[url:value = 'http://31.77.227.119/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174c0410-4fe3-5992-ae94-0000f3562e76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv6l","pattern":"[url:value = 'http://31.77.227.119/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--328eb6a6-26c3-6423-e054-0000911cc357","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sparc","pattern":"[url:value = 'http://31.77.227.119/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b4fc41a-ed9c-f533-aa6a-0000ac322d48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.i486","pattern":"[url:value = 'http://31.77.227.119/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273aa6a-50d1-e2d2-7074-00002cd27f2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.m68k","pattern":"[url:value = 'http://31.77.227.119/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9578330a-5aea-513b-5127-000053545cd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sh4","pattern":"[url:value = 'http://31.77.227.119/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5879b237-a934-528b-27c7-00002a78b341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/bin.sh","pattern":"[url:value = 'http://115.49.73.173:58794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9961c0a-29ce-d3b2-c84a-000006faabed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/i","pattern":"[url:value = 'http://116.2.60.14:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07bad22-284f-dd1f-df40-000013c1bdc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/bin.sh","pattern":"[url:value = 'http://105.225.137.62:54095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7fe96-90d5-77ac-4a05-0000d2d26bac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/i","pattern":"[url:value = 'http://123.4.243.157:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469a6a3c-1cbf-fc04-724c-000056cfa06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/i","pattern":"[url:value = 'http://105.225.137.62:54095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c592e2d-e0a4-955d-9a58-0000dd53703d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/bin.sh","pattern":"[url:value = 'http://182.119.7.9:33286/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104bbcfd-be02-2c88-7574-0000e014dc91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/i","pattern":"[url:value = 'http://182.117.48.159:45678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f349a6-4894-7e50-db2a-00002c8c3364","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/unifi","pattern":"[url:value = 'http://31.77.227.102/unifi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c18c58-4c0f-61fa-d7c0-0000ed8c1f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/bin.sh","pattern":"[url:value = 'http://222.139.104.173:42207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00fc09a-b26c-a0e0-3c32-00005fb7b297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/bin.sh","pattern":"[url:value = 'http://222.141.107.55:60545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2c8424-9d3f-1a32-7db7-0000a6059a52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update","pattern":"[url:value = 'https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e07839b-8aa6-0797-3286-00008bfa4cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.163.254:48146/i","pattern":"[url:value = 'http://115.201.163.254:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7116de6b-fab4-437c-4425-00005b9b3cde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.227:39666/i","pattern":"[url:value = 'http://115.48.147.227:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--418ef35d-92c7-54d0-a617-0000a583e455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/i","pattern":"[url:value = 'http://222.141.107.55:60545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c3eb02-6711-30f0-3553-00004815286c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/i","pattern":"[url:value = 'http://182.119.7.9:33286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e1b726-d43e-0bb6-02ab-0000b43f958e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/i","pattern":"[url:value = 'http://222.139.104.173:42207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e2c6bf-971c-4b01-bdf2-0000e9d00fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/i","pattern":"[url:value = 'http://42.235.36.124:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bef9eb-f880-b166-fc94-0000b866be60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.22.127:45156/i","pattern":"[url:value = 'http://42.53.22.127:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16030dfd-bf7e-ba08-1c79-000065cd8acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/bin.sh","pattern":"[url:value = 'http://109.171.67.100:40657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a701b52-69b6-537c-5272-0000627d05dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/bin.sh","pattern":"[url:value = 'http://116.2.60.14:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a8bfe4-20c8-4a41-8907-0000e1cda417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/bin.sh","pattern":"[url:value = 'http://117.208.42.53:55830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82806918-fe0a-0ee9-6394-0000bfc4e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/i","pattern":"[url:value = 'http://117.208.42.53:55830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1c05ed-87b8-8c2e-aad6-00003c3aaeab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/i","pattern":"[url:value = 'http://196.189.98.77:59901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027fc31c-8080-6c1a-3c56-0000c127f798","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/bin.sh","pattern":"[url:value = 'http://200.115.102.246:58251/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bed5709-6277-c84a-6d3b-0000d0e62bfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/bin.sh","pattern":"[url:value = 'http://123.129.132.69:54242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e62829d-3639-ccd6-a2f5-0000abb4943e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/i","pattern":"[url:value = 'http://109.171.67.100:40657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a19fcb-f0b0-ac3f-63f6-00003e8439b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/i","pattern":"[url:value = 'http://200.115.102.246:58251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--878085a9-da35-5489-e3c3-00008993cce8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.69.200:37705/i","pattern":"[url:value = 'http://123.11.69.200:37705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5717dd10-2887-c147-1efd-00005f15d81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/bin.sh","pattern":"[url:value = 'http://37.54.31.40:58523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11ae97c-7d1e-3fca-996c-0000db4365a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/i","pattern":"[url:value = 'http://37.54.31.40:58523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b16e9110-0348-86a3-6cae-00002a00116b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/bin.sh","pattern":"[url:value = 'http://219.155.195.226:55894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb991b7-20be-f7ed-c452-0000ee801de7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.219.43:42748/i","pattern":"[url:value = 'http://115.55.219.43:42748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d08f91-d1ea-0a6e-18a0-0000326fc1fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/bin.sh","pattern":"[url:value = 'http://118.34.109.121:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee71ed1-0a25-46dc-36b0-000092125203","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/bin.sh","pattern":"[url:value = 'http://219.155.104.55:50766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8c80dd-7d89-5eb6-839d-0000aeaab442","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/i","pattern":"[url:value = 'http://219.155.104.55:50766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4950e2ac-471a-ada8-21c3-000023372179","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/bin.sh","pattern":"[url:value = 'http://42.232.225.154:44359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7dc4e1-8573-6f39-1806-0000dd74e0f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/i","pattern":"[url:value = 'http://118.34.109.121:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b322a444-c5a5-255e-31e4-00009cee5808","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json","pattern":"[url:value = 'https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d625fd68-2156-2195-a9f7-000058a49457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/mips.sh","pattern":"[url:value = 'http://103.77.246.150/mips.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9127dcbc-58c9-edf4-87a4-0000b0b57d33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://qorvi.pro/fdab9755.exe","pattern":"[url:value = 'https://qorvi.pro/fdab9755.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0dcfa8f-d513-45ea-c74b-00007f298e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/i","pattern":"[url:value = 'http://42.232.225.154:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883c48e1-33c4-22c1-fdbc-00004b99463b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.49:47422/i","pattern":"[url:value = 'http://182.117.68.49:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--656d1d86-85b0-7ceb-883c-0000dda15300","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/react2shell.sh","pattern":"[url:value = 'http://91.92.47.97/bins/react2shell.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90522d7c-415d-d179-b91a-00000cd2be3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/gpon.sh","pattern":"[url:value = 'http://91.92.47.97/bins/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0dea03-1d8f-4c99-7726-00002c109c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.213.139.254:60192/bin.sh","pattern":"[url:value = 'http://27.213.139.254:60192/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d7d32b-8e31-6f6e-061d-000072cc3d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/bin.sh","pattern":"[url:value = 'http://219.157.16.206:50901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268f5ace-cc08-3639-e9e3-00005214d5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/bin.sh","pattern":"[url:value = 'http://38.46.30.224:41739/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--981c3cbf-a2c5-51de-2f8b-00005d86d9ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/bin.sh","pattern":"[url:value = 'http://115.55.232.8:44911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7f8f5b-aa4a-5eb4-fc05-0000e83e6c1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.168.209:49180/bin.sh","pattern":"[url:value = 'http://115.50.168.209:49180/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8702be3-4eff-73ca-7fc0-000079a7a7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/bin.sh","pattern":"[url:value = 'http://125.40.3.106:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6645867-7c4e-1343-5365-00008153eab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.195.50:44549/bin.sh","pattern":"[url:value = 'http://123.12.195.50:44549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05c1b2a-897b-3413-f827-00000a47502d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/i","pattern":"[url:value = 'http://221.15.197.170:53012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b63c454-8875-b06c-0ec2-0000e4eee121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/bin.sh","pattern":"[url:value = 'http://115.48.144.141:59560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4008d2c0-98b2-4979-9242-0000d80cfc01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.223.184:51992/i","pattern":"[url:value = 'http://115.55.223.184:51992/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6dd48b-48b3-733b-d411-0000cf41ac9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.43.84.8:46173/i","pattern":"[url:value = 'http://175.43.84.8:46173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cebc7bf-b6f2-3ba5-0c00-0000891786c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/i","pattern":"[url:value = 'http://189.7.90.15:36886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952299c3-d5a7-44b9-d10a-0000127c1d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.234:43356/i","pattern":"[url:value = 'http://120.84.213.234:43356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed0fbf5-d86c-394f-1169-000036e21e19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/i","pattern":"[url:value = 'http://115.50.226.58:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff36c843-ebb5-df14-eee2-00004a33be17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.245.135.249:57082/i","pattern":"[url:value = 'http://117.245.135.249:57082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464c80da-3f46-18db-75ae-0000308160fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/bin.sh","pattern":"[url:value = 'http://105.184.13.132:52355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2fc8db-6a23-bade-3d86-0000dd58ff9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.90.250:37580/i","pattern":"[url:value = 'http://182.120.90.250:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21a9de1-597b-ea1d-9eb1-000065dbf2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/bin.sh","pattern":"[url:value = 'http://61.137.199.253:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ad2489-5d69-d089-59d7-0000431d5ba0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/i","pattern":"[url:value = 'http://61.137.199.253:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--015887c1-1a66-f1f8-e244-000075696e92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/bin.sh","pattern":"[url:value = 'http://111.72.43.182:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe5eb35-2dc6-8f52-7be9-0000bb3c5eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/bin.sh","pattern":"[url:value = 'http://221.15.197.170:53012/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c4c914-c2f1-0a60-4ce2-0000696824ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/bin.sh","pattern":"[url:value = 'http://210.208.106.68:49665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684f11c0-9abd-5d1c-1d4e-0000d063ac97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/i","pattern":"[url:value = 'http://210.208.106.68:49665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4158278-ccf8-c348-6428-0000cafc62b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/i","pattern":"[url:value = 'http://42.85.51.157:47726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49524c-a8e6-a467-f8fd-00000a7bf775","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/i","pattern":"[url:value = 'http://210.208.110.221:37492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad16cf5d-4112-24e7-7778-000028a48630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/bin.sh","pattern":"[url:value = 'http://210.208.110.20:60687/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2fc897-7540-0ab6-32e3-0000a4d88b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.120.245:38927/i","pattern":"[url:value = 'http://42.224.120.245:38927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01940c0-78f0-569e-8d19-0000f1cb34fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/i","pattern":"[url:value = 'http://115.50.157.21:42304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3006e521-d13d-38a5-c9c8-00000793cbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/bin.sh","pattern":"[url:value = 'http://182.126.80.97:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27449a3c-50cc-74b7-dae9-00002318be64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/bin.sh","pattern":"[url:value = 'http://210.208.104.156:49483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581ccbf1-e506-06d4-7c20-00007c7f0edb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/bin.sh","pattern":"[url:value = 'http://42.230.44.245:48721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812fe4aa-017f-fa98-40ba-0000b15a9628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/bin.sh","pattern":"[url:value = 'http://219.156.20.248:59087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d752d3-751e-a6ba-d40e-0000eb83b601","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/i","pattern":"[url:value = 'http://123.172.77.129:45661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b99ae89-5dcd-0739-6c47-0000a3c5df2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/bin.sh","pattern":"[url:value = 'http://42.224.194.129:53622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d72ab9c-49ff-b129-5f54-0000f3877165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/bin.sh","pattern":"[url:value = 'http://113.239.81.215:38553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bb9b96-d2c2-c122-3609-0000c3eeb819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/bin.sh","pattern":"[url:value = 'http://92.124.120.65:43084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f2cd4a-a7d2-5387-31f7-0000a49c779f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/i","pattern":"[url:value = 'http://115.55.232.8:44911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bfdf0c2-eb82-3f1f-1a3c-0000b1ed6897","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.118.112:41221/i","pattern":"[url:value = 'http://61.52.118.112:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6d2f2c-ce37-8f1e-94c7-0000e43edf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.152:53328/i","pattern":"[url:value = 'http://42.224.101.152:53328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d230214-74b3-137b-9648-00007f085d6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/i","pattern":"[url:value = 'http://123.4.132.108:50167/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01d360b-b37c-611f-5c4a-000012395733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/i","pattern":"[url:value = 'http://115.54.224.69:44752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59bd2738-1b7e-e5e2-623f-0000b11b8c8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/i","pattern":"[url:value = 'http://222.141.132.237:60298/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--251bee29-c0da-8d7e-4e5a-000089722f6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/bin.sh","pattern":"[url:value = 'http://125.46.198.143:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e1f3c7-ec9e-1705-fe2d-0000880aa55a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/i","pattern":"[url:value = 'http://105.184.13.132:52355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc393d9e-0aec-7f2f-4f2e-00003616103e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/bin.sh","pattern":"[url:value = 'http://196.189.98.77:59901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a0b2017-3f18-5790-1d50-0000ef490d6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/i","pattern":"[url:value = 'http://42.230.44.245:48721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7127421-255f-8265-6c76-00007513a424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.219.0:36990/i","pattern":"[url:value = 'http://182.121.219.0:36990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c108fc9c-d8c0-ddd9-05ba-0000b6ad2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/bin.sh","pattern":"[url:value = 'http://218.59.109.9:54831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae980698-aba5-6c51-4d20-0000aff810b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/bin.sh","pattern":"[url:value = 'http://61.53.202.74:59244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06406f1a-1b02-ee4c-29bc-0000717e55f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/i","pattern":"[url:value = 'http://60.22.195.207:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce3a5a0-d8f4-f3e2-1099-0000c77de3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/i","pattern":"[url:value = 'http://223.151.74.149:48587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603af7bb-82e2-aabf-2ed0-0000a08cfaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/i","pattern":"[url:value = 'http://180.191.230.61:39051/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbaa136a-227d-538a-8092-0000e6da00f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/i","pattern":"[url:value = 'http://182.116.55.50:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dd8e59-dda6-c737-d2fa-0000ca794bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/bin.sh","pattern":"[url:value = 'http://42.85.51.157:47726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66b56dc-c6d7-424f-7db9-00004664cb4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/bin.sh","pattern":"[url:value = 'http://219.155.209.143:51886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99739bb1-2301-68f5-40c9-00006b53a247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/i","pattern":"[url:value = 'http://210.208.104.156:49483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a631269d-e19e-e0ef-55ad-000093bdedb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/bin.sh","pattern":"[url:value = 'http://180.191.230.61:39051/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--696351d0-c15a-f1b0-3503-00000ee42c00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/bin.sh","pattern":"[url:value = 'http://113.236.118.216:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c05937-ed34-68fc-c04e-0000254f92b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/bin.sh","pattern":"[url:value = 'http://115.54.224.69:44752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c52d740-96ee-867a-43d2-0000cff0ab62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/i","pattern":"[url:value = 'http://219.155.209.143:51886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64789e47-994c-b3af-5a17-000030bf8015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/i","pattern":"[url:value = 'http://61.54.43.35:53946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd9044d-adf4-4998-a59d-00001757f4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:59953/i","pattern":"[url:value = 'http://41.201.226.25:59953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39df35a3-de2b-06c5-f104-00009b15ab5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/bin.sh","pattern":"[url:value = 'http://189.7.90.15:36886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8feef2c9-83fe-00cd-d6ec-00000b30a4ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://95.165.187.102:54251/i","pattern":"[url:value = 'http://95.165.187.102:54251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f68114-3531-c589-212e-0000991fb012","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/i","pattern":"[url:value = 'http://81.227.43.128:45355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ab48f0-9fcd-3960-a3f8-0000381689d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/bin.sh","pattern":"[url:value = 'http://115.50.226.58:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6339bf53-2f5c-b037-dd28-0000a6d4ef5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/bin.sh","pattern":"[url:value = 'http://115.63.145.245:55982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4c354a-6c34-4010-6cce-00005420826b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/i","pattern":"[url:value = 'http://125.46.198.143:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f762bfba-8064-f3ea-e637-0000fc5e8c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.182.147:58870/i","pattern":"[url:value = 'http://123.14.182.147:58870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205f54bd-8797-e682-2eab-00001cf3fcf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/i","pattern":"[url:value = 'http://42.239.252.93:34307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb3385e-3f4b-1fbc-5f12-0000d7a318c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/bin.sh","pattern":"[url:value = 'http://175.167.86.22:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b3695c-e8d7-edef-26db-00007787a083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/bin.sh","pattern":"[url:value = 'http://42.234.245.232:58215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b787c907-02c9-b2ec-d14a-000098dd2918","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.131:40429/i","pattern":"[url:value = 'http://182.121.153.131:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6796b11-14b8-b706-1ca9-00004642f7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/bin.sh","pattern":"[url:value = 'http://123.97.89.239:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20493c42-fde0-ec83-b74a-0000fb9b9ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/i","pattern":"[url:value = 'http://222.139.229.134:40628/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ca2318-0320-6f0b-6524-0000235beb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/bin.sh","pattern":"[url:value = 'http://42.239.252.93:34307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c4abf4-2398-abbd-e464-00009741fdb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.74:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0261e5b1-bb0d-6f55-a3a3-0000295687ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/i","pattern":"[url:value = 'http://42.234.245.232:58215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e74b1047-6f38-09d7-a4ee-00002a6f5445","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.55.19:56855/bin.sh","pattern":"[url:value = 'http://115.55.55.19:56855/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016334e0-b393-e7af-ecbf-00003205561a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.173.127:59094/i","pattern":"[url:value = 'http://42.235.173.127:59094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85751b7b-a08e-e17a-aa2f-0000258b8cb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.150.168:38582/i","pattern":"[url:value = 'http://61.53.150.168:38582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac30086a-5cf1-df81-e813-00005f36b150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/i","pattern":"[url:value = 'http://123.97.89.239:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1c8c7b-0bc6-abde-e988-00002fe549ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/i","pattern":"[url:value = 'http://210.208.110.20:60687/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc7ee31-8a06-061d-1fe1-000014224373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/i","pattern":"[url:value = 'http://115.48.144.141:59560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d835f896-5a93-9612-0de7-0000873e2ea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/bin.sh","pattern":"[url:value = 'http://124.131.167.151:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1350a1e-9688-c8f4-518a-00004e92e7ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/bin.sh","pattern":"[url:value = 'http://210.208.110.221:37492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9309535-ba7b-9a9c-cabd-0000fc392cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/i","pattern":"[url:value = 'http://111.72.43.182:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53fc4a46-aa0f-6eff-be8c-00003efcad37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/i","pattern":"[url:value = 'http://182.121.250.74:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b8e7c0-5916-2018-96bd-0000b15c8d6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.245.119:56931/i","pattern":"[url:value = 'http://123.14.245.119:56931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa9bfe2-da2b-c0ca-5584-00009247e821","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/bin.sh","pattern":"[url:value = 'http://61.54.43.35:53946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db2cf3dd-c056-c0ad-4941-00007c6e3d8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/i","pattern":"[url:value = 'http://92.124.120.65:43084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23f7327-e9f4-6bd1-e50c-00007b001231","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.242.207:40709/i","pattern":"[url:value = 'http://123.11.242.207:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8981d19-6f85-c7cd-46f2-0000e639aac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.248.137:53264/i","pattern":"[url:value = 'http://115.55.248.137:53264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb569e5b-0339-5dc1-9780-0000f955d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/i","pattern":"[url:value = 'http://175.167.86.22:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d99cda3-f43f-30d0-1fd1-0000d8cf2469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.214.107:59459/i","pattern":"[url:value = 'http://120.84.214.107:59459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc3c9174-6f11-5b7d-3f62-0000e0bb4202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/i","pattern":"[url:value = 'http://115.63.207.26:37498/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--161a212a-8391-ec17-bfd3-0000b0516a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.180.35:55889/i","pattern":"[url:value = 'http://222.140.180.35:55889/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4048ec-8c6d-9b0d-1128-00001af2e8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/bin.sh","pattern":"[url:value = 'http://115.63.207.26:37498/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81044243-7090-c85e-a73a-000043889f28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/i","pattern":"[url:value = 'http://210.208.110.147:36598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b96a4b2-524f-5e08-d676-0000e1ab20d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.114.153:35365/i","pattern":"[url:value = 'http://182.116.114.153:35365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1cdeb0-311c-f530-39e3-00003a920f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/i","pattern":"[url:value = 'http://210.208.111.220:46346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e6f6c-25df-8d27-873d-00008b080d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/bin.sh","pattern":"[url:value = 'http://123.190.18.137:43516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fe9955-f70e-5042-c504-00006487473c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/i","pattern":"[url:value = 'http://210.208.116.107:58255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebafd5c-c0ab-d7ce-57cc-00001b765776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/i","pattern":"[url:value = 'http://125.112.59.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f4d3e9-763f-8f2b-d651-000042800eeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.85.225:50581/i","pattern":"[url:value = 'http://36.69.85.225:50581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49899e-37e2-ebb5-957a-0000e6ba0aff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/bin.sh","pattern":"[url:value = 'http://210.208.110.147:36598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b587c5-b33b-fbdf-7795-0000acdb58f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/i","pattern":"[url:value = 'http://182.240.9.116:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bef2322-c00f-aff0-b1c9-000041a35f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/bin.sh","pattern":"[url:value = 'http://210.208.116.107:58255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ceeef-9152-a46e-5f1f-00009f8340f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.205.71:36863/i","pattern":"[url:value = 'http://175.175.205.71:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b359aa-838a-3571-cc32-000019889971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/bin.sh","pattern":"[url:value = 'http://105.184.213.168:46781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaba294b-dd5a-e898-29a3-0000e74be21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/i","pattern":"[url:value = 'http://219.157.16.206:50901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c5365b4-9e1e-ba2f-f5b6-0000dcc98ce2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/bin.sh","pattern":"[url:value = 'http://60.22.193.90:43235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e5a0d7-040c-c278-6bba-000002d7cc24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/bin.sh","pattern":"[url:value = 'http://42.239.149.237:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6caf3f7-ee39-62d2-acfa-000000ddb9dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/i","pattern":"[url:value = 'http://38.46.30.224:41739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fac8baf-2ce1-59a2-af8c-00002145f1df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/bin.sh","pattern":"[url:value = 'http://210.208.111.74:34826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1e12b6-3e2e-4fee-c051-0000b75e8ac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.143.124:45357/bin.sh","pattern":"[url:value = 'http://117.223.143.124:45357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b8fc72-a943-c19d-29a8-0000deb06c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/bin.sh","pattern":"[url:value = 'http://111.163.247.38:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1869d9-75a9-d5b0-44dd-0000d17d03d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/i","pattern":"[url:value = 'http://111.163.247.38:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3304f030-50ac-527e-86df-0000c3cc85a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/i","pattern":"[url:value = 'http://105.184.213.168:46781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2185126e-b00c-2cb0-70d1-00005319a4d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/i","pattern":"[url:value = 'http://42.239.149.237:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--839a03df-8e24-283c-86dc-000049541eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/i","pattern":"[url:value = 'http://210.208.111.74:34826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaaedc3-4068-d422-bfeb-0000ba4caa2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.39:48840/i","pattern":"[url:value = 'http://112.242.56.39:48840/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c133c7bd-3bb6-fa6f-c4fe-0000029b08b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/bin.sh","pattern":"[url:value = 'http://61.53.135.208:46338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32041c85-ede4-dda4-e295-0000f29205b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.155:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7acc5d-ca1e-0fce-703b-0000478df8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/i","pattern":"[url:value = 'http://60.22.193.90:43235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1f5d11-b111-c631-49c5-00006b8fa25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/i","pattern":"[url:value = 'http://61.53.135.208:46338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf54a176-4c1b-d38e-e8c6-00007f1049c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/i","pattern":"[url:value = 'http://182.121.231.155:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e963c1-8eb8-eafb-e5fe-0000f31ddb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/bin.sh","pattern":"[url:value = 'http://117.26.83.196:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c460d3-ca20-3bf5-01c4-0000824da3c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/bin.sh","pattern":"[url:value = 'http://42.86.155.61:50155/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e563d6b4-6d4f-6723-88f9-000035f841fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.i686","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbd9a18-306f-ee0d-db5d-0000d83d1a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c2203d-c741-d2e8-2a4a-0000382bb404","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/i","pattern":"[url:value = 'http://42.86.155.61:50155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb8d0476-8b30-75e4-a804-0000536f6b3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c2b4ac3-c2b5-c171-0fa1-0000c1b533e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.76.29.161/389242390482/dlr.sh","pattern":"[url:value = 'http://31.76.29.161/389242390482/dlr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e200fe-12a9-58af-78d2-0000052898d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/i","pattern":"[url:value = 'http://219.157.246.145:56603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b193552f-f998-b7d8-8277-000069ad2f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/bin.sh","pattern":"[url:value = 'http://61.53.133.115:54046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0aa6c6-fc0d-06c9-84c3-000079dc5d07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/gpon","pattern":"[url:value = 'http://31.77.227.102/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6088f-20ed-8e35-788a-0000b976e407","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/hik","pattern":"[url:value = 'http://31.77.227.102/hik']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9590903-c2ee-a89c-9118-00003545a917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/vitek","pattern":"[url:value = 'http://31.77.227.102/vitek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c64a6a6-4bc6-d5a7-b72a-00009b01da7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm7","pattern":"[url:value = 'http://31.77.227.102/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5757c380-de54-1fb4-7947-0000009b1ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a640a5fc-9dc1-376b-269c-0000ed04c680","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fef34d2-632e-2a93-40ee-0000f1e4a881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mips","pattern":"[url:value = 'http://31.77.227.102/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93031da4-f64e-6c01-9358-00004c628d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507aa11b-6af5-f7d1-2a4a-0000e3c91ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv5l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb972e6e-96b7-c202-faed-0000d353acf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm7","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4961905a-c199-bcf4-1734-0000dea93555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv4l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6561a102-f1e4-412c-a690-00007a5b4dc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76dbaaa8-f79a-7474-f9cd-000066f4163f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.x86","pattern":"[url:value = 'http://31.77.227.102/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7a9043-51a5-7f7e-3a46-0000473b6473","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401cf108-4e82-11c2-5a97-0000e3c398e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm64","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439812f0-4659-bcaa-b28d-0000c7925d98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.x86","pattern":"[url:value = 'http://31.77.227.102/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301cd53c-63c7-bc66-2a79-00003149347f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b639630-281a-9db8-f0a6-000023bdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm6","pattern":"[url:value = 'http://31.77.227.102/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb43616-0b09-c118-9853-0000a9cd7c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9158486-cc07-0a49-73c3-000023fc9b91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc901ef8-3f24-fca1-d05a-00006befcb91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm6","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de12b410-6662-b3a7-5cb6-00009b40fcf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26ac78a-9e16-1eba-730c-0000310812f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm5","pattern":"[url:value = 'http://31.77.227.102/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55994f42-557d-321a-62da-0000795a647f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm5","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b57f2d8-a061-fc96-d396-0000a4696635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv6l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--624cc399-01a8-14d6-e190-000099094f85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4cf2c1-ecf4-40fe-1520-00003dfb3713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2525daf-dd10-a589-b026-0000ac224c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm","pattern":"[url:value = 'http://31.77.227.102/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d867783-e46d-039f-02ef-000073a0290e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.aarch64","pattern":"[url:value = 'http://31.77.227.102/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09335b57-e0e1-294e-340c-00007b1a981b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.powerpc","pattern":"[url:value = 'http://31.77.227.102/d/xd.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb86865-9264-a62a-d8a5-0000d2f496cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daad005f-e566-9362-fdf6-00003bf1f3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips64","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5344802-e5bd-a8f2-4c23-0000eee6a0ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm64","pattern":"[url:value = 'http://31.77.227.102/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81cbc1a-91c8-9e0c-40b8-0000b9b6de0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mips","pattern":"[url:value = 'http://31.77.227.102/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8bd70e-6d6f-c1cd-25d9-00004afb61fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mipsel","pattern":"[url:value = 'http://31.77.227.102/d/xd.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8315d08-4268-5402-ce65-0000a4ae37fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc440fp","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dce7ad3-175e-eaee-99e2-0000d2b5b041","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mpsl","pattern":"[url:value = 'http://31.77.227.102/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2a233e-df6d-f300-6d94-0000bf9133ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6aaeac-e036-5e60-247f-0000b9f7f881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c428a9-2abc-eafa-e810-0000e38b8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm64","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471be5aa-a3a3-5e77-1e5b-000089f5531a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da3df21b-eb4f-cbcf-1600-00009ae7c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc7b1459-cea8-5ea6-814f-00007e622fac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.228.109.209:34880/i","pattern":"[url:value = 'http://83.228.109.209:34880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2bedf75-31c9-b55f-5546-00008c35a8bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/bin.sh","pattern":"[url:value = 'http://138.204.196.254:46255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c3ad78-b4b5-3d01-6bc4-0000b7502daa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/i","pattern":"[url:value = 'http://61.53.133.115:54046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfa5b07-df52-fa3d-290f-0000f51eccfd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/bin.sh","pattern":"[url:value = 'http://113.239.216.250:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c3edbd-fa21-35c3-e97c-0000d04d36c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/i","pattern":"[url:value = 'http://138.204.196.254:46255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e22762a5-b4fa-9cc8-dfe0-0000d9046689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/i","pattern":"[url:value = 'http://219.157.249.227:40515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558ca742-057f-dd05-33e0-00008220f970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/i","pattern":"[url:value = 'http://113.239.216.250:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ce8c1f-3457-d10c-1022-000008e699f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.40.206:33747/i","pattern":"[url:value = 'http://112.123.40.206:33747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4811f558-c621-bc5c-e5cd-000095a20fe4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.x86_64","pattern":"[url:value = 'http://167.86.99.169/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89ed6a7-f64d-96a2-c1e1-0000e894d259","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.m68k","pattern":"[url:value = 'http://167.86.99.169/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe9055f-d81a-719e-15b1-000037378285","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.217.97.115/topinmsi.png","pattern":"[url:value = 'http://217.217.97.115/topinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b2e271-841d-3604-4e7a-0000e8620483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mips","pattern":"[url:value = 'http://167.86.99.169/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc8fd10-24ec-00b6-e4b0-0000dcfd33b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp4.exe","pattern":"[url:value = 'http://196.251.107.186/clp4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75626935-210f-d95f-66d4-0000c155b23a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3ee54d-fb78-571a-20de-00006e5c4151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b917cba-24eb-26ba-6d3c-0000383dab7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a207f576-903a-1fe9-70c6-000053a5d1b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.172.167.65:8080/s.ps1","pattern":"[url:value = 'http://167.172.167.65:8080/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c24ec80-5996-e64e-4bb8-0000db8b0693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.99.32.48/b2f628/cronb.sh","pattern":"[url:value = 'http://140.99.32.48/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d3a466-c98c-a724-1fd0-00006d9d083f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.141.58.166/b2f628/cronb.sh","pattern":"[url:value = 'http://209.141.58.166/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8632ab-22ca-6ecd-1091-0000c8f08565","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/bin.sh","pattern":"[url:value = 'http://123.14.253.90:48325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a7b72ce-e969-2f2e-9146-0000b5994d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/bin.sh","pattern":"[url:value = 'http://123.7.222.46:55307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae77be5-0dc8-1d0c-ea3b-0000a9fa8079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.ppc","pattern":"[url:value = 'http://94.154.43.227/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb599b2-f108-aa33-aebd-00002924198f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.sh4","pattern":"[url:value = 'http://94.154.43.227/d/xd.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf077214-9684-7902-248a-00006c34c01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm7","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57554a2b-be5d-52b7-7560-0000d1f9ee0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.x86","pattern":"[url:value = 'http://94.154.43.227/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57535c7e-2d69-774d-b5ef-00004e7512b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.m68k","pattern":"[url:value = 'http://94.154.43.227/d/xd.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21091338-ea29-51e1-3286-0000c63d0891","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm5","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7f68a8-0a9e-6421-2b2a-00004e83c46f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mips","pattern":"[url:value = 'http://94.154.43.227/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28dfd27-57d8-31dc-3045-0000fb6f7514","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeadae61-87a4-a643-8648-00002580aa25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mpsl","pattern":"[url:value = 'http://94.154.43.227/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a1c5bc-aba7-a76f-1be8-00002f6ef2d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.spc","pattern":"[url:value = 'http://94.154.43.227/d/xd.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8004282-7a24-6f8b-68d7-0000d488a77f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm6","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15f2c-4bea-dbf3-f8a1-00004464381f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.180:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4044d42-c603-ca6d-9891-0000c5d2e9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/i","pattern":"[url:value = 'http://123.7.222.46:55307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b327e0c-3744-6ed9-70d1-00008407b929","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/bin.sh","pattern":"[url:value = 'http://42.6.252.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82671c71-4273-4fa9-6d7d-000094e4eeed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/2.7.exe","pattern":"[url:value = 'http://196.251.107.186/2.7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--685aa78b-ec58-ca79-cb7d-000073ee2363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c244cf58-671d-8cc7-a8e7-0000ab0a746c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.154.157:40086/i","pattern":"[url:value = 'http://42.234.154.157:40086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a6a755-258b-52e1-6736-000040f2855e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.powerpc","pattern":"[url:value = 'http://167.86.99.169/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d701e5d7-c191-d956-865f-000028be51f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sparc","pattern":"[url:value = 'http://167.86.99.169/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ff8db3-0793-12b4-bff8-000090410cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsrouter","pattern":"[url:value = 'http://167.86.99.169/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6577ef3f-f96d-e4b5-be75-0000ccc6ecda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsel","pattern":"[url:value = 'http://167.86.99.169/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b0fba8-a6ea-0872-a587-00001f34c2a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv7l","pattern":"[url:value = 'http://167.86.99.169/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddbe5f4-87c0-0dcc-92af-000074b3922a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sh4","pattern":"[url:value = 'http://167.86.99.169/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30abcae9-2803-4956-3754-00002254eb15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv6l","pattern":"[url:value = 'http://167.86.99.169/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--029da86b-2439-9c42-4961-00005894b875","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv4l","pattern":"[url:value = 'http://167.86.99.169/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b86992a-7bd2-9b3c-cf4e-000065f491c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv5l","pattern":"[url:value = 'http://167.86.99.169/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a2b8d7-3279-6faf-1105-00006874803e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.i486","pattern":"[url:value = 'http://167.86.99.169/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--275bac66-69f3-b571-9bb2-000046278982","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.arc","pattern":"[url:value = 'http://167.86.99.169/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183b6e82-3c26-adea-df7c-00005cb22555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/telnet.sh","pattern":"[url:value = 'http://167.86.99.169/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5d1885-dcf9-7427-e296-000084492909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/cat.sh","pattern":"[url:value = 'http://167.86.99.169/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0a9114-b2a9-8094-31e4-000067d61c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/bin.sh","pattern":"[url:value = 'http://42.54.159.124:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fd4992-bfd4-3aca-daf4-0000e856531c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/i","pattern":"[url:value = 'http://115.48.163.180:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a611abaf-3a31-11e7-b1f9-000001111a85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/i","pattern":"[url:value = 'http://42.6.252.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff91d9b-6b61-86cb-caa0-00003e3d34c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/i","pattern":"[url:value = 'http://123.14.253.90:48325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743711f1-05d5-c75d-e04a-0000ab14da22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/bin.sh","pattern":"[url:value = 'http://115.57.233.250:43213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d2c6ba-46b8-aa90-8067-0000c9c2fd38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/i","pattern":"[url:value = 'http://115.57.233.250:43213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de48dc-19e6-d710-1690-0000292eb3a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/1.sh","pattern":"[url:value = 'http://37.49.230.40/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--966be732-1056-b2dd-84a9-000018c6a93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/2.sh","pattern":"[url:value = 'http://37.49.230.40/2.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed78057-2033-d730-3a93-0000beb1a289","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/3.sh","pattern":"[url:value = 'http://37.49.230.40/3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b72a989e-9eb7-97fc-b9a8-000061d81927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/i","pattern":"[url:value = 'http://42.54.159.124:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446438-e7ec-7677-345d-0000ae2eda9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe","pattern":"[url:value = 'http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db0079e-2a20-2758-a0ca-000087dbf592","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'http://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff66655-46ef-0f31-fac0-0000f9783242","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86_64","pattern":"[url:value = 'http://176.65.139.209/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7461510-77cf-be3d-0def-0000405ae488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/w.sh","pattern":"[url:value = 'http://176.65.139.209/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1aab49f-8d1c-8dad-08de-0000b4939bd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm7","pattern":"[url:value = 'http://176.65.139.209/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb10955b-4311-df75-fdde-0000851eea7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/spc","pattern":"[url:value = 'http://176.65.139.209/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc04c955-3967-e737-16ea-000083540127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/sh4","pattern":"[url:value = 'http://176.65.139.209/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92907c32-b9f9-0941-7cd3-0000a01cd17c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mipsel","pattern":"[url:value = 'http://176.65.139.209/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69fe9af5-3099-5f22-07eb-000096d24977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/m68k","pattern":"[url:value = 'http://176.65.139.209/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d2ae23-4264-92f1-d860-000096249fad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mips","pattern":"[url:value = 'http://176.65.139.209/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9562b02-3ca7-e4ca-30f4-0000038a98d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/ppc","pattern":"[url:value = 'http://176.65.139.209/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ad8409-3671-89e7-ae95-00000c2ffcbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm6","pattern":"[url:value = 'http://176.65.139.209/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--713cadc0-fba1-d083-9abf-0000511f6dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm","pattern":"[url:value = 'http://176.65.139.209/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4d5b3-327a-e66f-5a66-00001e9a5353","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm5","pattern":"[url:value = 'http://176.65.139.209/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e41acc-459d-9bc5-2d71-00007b89f6a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86","pattern":"[url:value = 'http://176.65.139.209/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a8a269-3399-361d-61b6-0000f74c40d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.212/eclipse.sh","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4042b8b9-c200-4a92-84f6-00008a37847d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.x86_64","pattern":"[url:value = 'http://176.65.139.212/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa326f6-7a2d-d1cf-4852-0000c93e3b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.powerpc","pattern":"[url:value = 'http://176.65.139.212/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acee58a-1265-c67f-babc-0000470133ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv4l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9dfa5e-be1d-3e28-b4ee-0000f2b9a096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i686","pattern":"[url:value = 'http://176.65.139.212/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a097496-6789-417a-a639-00003f678520","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mips","pattern":"[url:value = 'http://176.65.139.212/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e3b649-c448-2343-efb8-000000a1493c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv7l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d5d4cb-c32f-3afc-e031-00007a611a5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv5l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d24a2de-497f-ea1c-0f48-0000d3536743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mipsel","pattern":"[url:value = 'http://176.65.139.212/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f88708-d4b9-86b4-3457-00003dc1608c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv6l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6254040-7e3a-3400-4ae2-00003f9153fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.m68k","pattern":"[url:value = 'http://176.65.139.212/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4edb4407-dd3e-5514-e880-0000742dd238","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i586","pattern":"[url:value = 'http://176.65.139.212/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7bf6a66-e459-ef61-7c2b-00007ce0dfcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.sh4","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b2d0a8-8034-cf81-0ef4-0000874a5edf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/i","pattern":"[url:value = 'http://120.84.215.27:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1331b029-d0d0-a562-3c8f-000076f19650","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/bin.sh","pattern":"[url:value = 'http://81.227.43.128:45355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed99707c-a1ca-561c-057a-00000f718661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.138.107.171:58489/i","pattern":"[url:value = 'http://116.138.107.171:58489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f573dd-741b-80fa-1441-0000b8e2cf29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.38.44:54807/bin.sh","pattern":"[url:value = 'http://125.110.38.44:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e3fb6b-db8c-c6d8-fa4d-00007ebfeaf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.252.20:55570/i","pattern":"[url:value = 'http://125.42.252.20:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6ce903-852e-8474-9e38-00003d889e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/bin.sh","pattern":"[url:value = 'http://46.16.150.139:51622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0d2d34-b910-c7a6-9cc7-0000898f2e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/bin.sh","pattern":"[url:value = 'http://85.12.251.50:45018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e263a65e-3c8d-e4a5-425b-0000beb26d7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/i","pattern":"[url:value = 'http://46.16.150.139:51622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc7778d-d75f-7c73-c945-000078e57580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/bin.sh","pattern":"[url:value = 'http://103.160.130.178:42478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4065890-023d-dc2c-56ff-000092648f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/i","pattern":"[url:value = 'http://85.12.251.50:45018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86847a8b-e409-7cd4-b64f-00002613670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/i","pattern":"[url:value = 'http://103.160.130.178:42478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e26eab-ffd1-eabb-14b9-000094213202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/i","pattern":"[url:value = 'http://115.49.7.198:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6215a9-61b6-727f-e57a-0000b6d6c56d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/bin.sh","pattern":"[url:value = 'http://60.23.239.236:48291/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15624c0b-45c8-91f0-7c92-00000753aa27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/i","pattern":"[url:value = 'http://60.23.239.236:48291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036e5113-6ee7-cfc4-d06f-0000e3bc78ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nm/a","pattern":"[url:value = 'http://178.16.55.240/nm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba64df5a-7c14-7acc-36e6-0000d92292e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:50791/bin.sh","pattern":"[url:value = 'http://196.190.133.180:50791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1805bd4a-bd85-9a37-209d-0000a87a69da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.46.67:33765/i","pattern":"[url:value = 'http://222.139.46.67:33765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34753f0-4bd0-e0ba-ce31-0000389cec29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/a","pattern":"[url:value = 'http://178.16.55.240/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd498db-49cc-086d-8bc8-00004d8c894f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/bin.sh","pattern":"[url:value = 'http://124.6.168.74:46806/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6cbd4a8-dcda-ce9c-0bbb-0000caff52e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.134:40959/i","pattern":"[url:value = 'http://120.84.214.134:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9173aed8-fd9d-3b10-d1a8-00008e649056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/bin.sh","pattern":"[url:value = 'http://42.55.107.64:42203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b172d4b-af70-02b0-b787-00002b40f89c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/bin.sh","pattern":"[url:value = 'http://115.63.82.0:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75492de-0b13-9a34-bd1a-00005c102006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/bin.sh","pattern":"[url:value = 'http://182.127.53.74:32795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd320d2-a89c-a602-79f0-0000f02503c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.162.214.49:58599/bin.sh","pattern":"[url:value = 'http://60.162.214.49:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487b03f1-dd49-937d-0866-0000ac8aa776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/i","pattern":"[url:value = 'http://42.55.107.64:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7608d0-74a7-9682-60fc-000008402ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/i","pattern":"[url:value = 'http://115.63.82.0:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb29085-6f3d-eb55-d35f-000047a6c4e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/bin.sh","pattern":"[url:value = 'http://182.112.34.219:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77502cee-44b6-7f21-b001-000005508229","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/i","pattern":"[url:value = 'http://182.127.53.74:32795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6baf6919-aa78-9404-a2cd-000015d7b3ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.19.212.208:47835/bin.sh","pattern":"[url:value = 'http://60.19.212.208:47835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d43eead-6009-7f1d-94af-00000afe4548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/i","pattern":"[url:value = 'http://182.112.34.219:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--571bcf40-0587-fdc2-15b2-000042ebca54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/bin.sh","pattern":"[url:value = 'http://123.4.132.108:50167/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71eeaae9-2231-4871-3863-0000411f35ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nmm/a","pattern":"[url:value = 'http://178.16.55.240/nmm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f0bbf-3ec4-5288-175e-00003fe3790e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/i","pattern":"[url:value = 'http://119.183.51.162:34711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ed5f54-c182-80f8-20db-00007c5b1cce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/bin.sh","pattern":"[url:value = 'http://182.116.36.131:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9437857-2efc-7827-12b3-000095b69eb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/bin.sh","pattern":"[url:value = 'http://60.22.195.207:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f330dec4-fda4-7541-5895-00005bb2a3fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/bin.sh","pattern":"[url:value = 'http://110.186.228.173:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--479b2fd9-2dd6-be1d-53bc-000003ef39f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/bin.sh","pattern":"[url:value = 'http://182.117.48.159:45678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed37052d-fe33-70de-b5d9-00000129c1ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/i","pattern":"[url:value = 'http://182.116.36.131:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de4c800-d59e-0607-7c03-000050323ef4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/bin.sh","pattern":"[url:value = 'http://123.9.245.182:54119/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7ffa28-9f7c-50d4-dbb7-0000ecc13760","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/i","pattern":"[url:value = 'http://123.9.245.182:54119/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52c32b-b7f3-4abd-dca8-0000a5dc5871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/i","pattern":"[url:value = 'http://110.186.228.173:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af95808f-1a1d-9a36-9880-0000a5f9e63c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/px86","pattern":"[url:value = 'http://31.77.227.134/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6df74c-3cc1-3389-334e-0000e5085b58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/bin.sh","pattern":"[url:value = 'http://210.208.111.26:55671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb3a85e-c4fb-b8cf-4151-0000a6e2927f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/bin.sh","pattern":"[url:value = 'http://60.23.192.74:54261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363da11-6e46-1582-9f86-000046fe91fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/bin.sh","pattern":"[url:value = 'http://110.139.34.163:54048/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd17407c-1700-e3f2-e98f-0000da371ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.129.220:50657/i","pattern":"[url:value = 'http://115.55.129.220:50657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b6b767-4bd2-2447-cc3d-00003068b6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.46.86:54016/i","pattern":"[url:value = 'http://115.61.46.86:54016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e685e54-71cf-46db-0063-0000f8925a1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/i","pattern":"[url:value = 'http://210.208.111.26:55671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233713fe-7288-0bd9-ca56-0000927effca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/i","pattern":"[url:value = 'http://60.23.192.74:54261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb07afa3-f688-429d-8c5c-000098b393e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/bin.sh","pattern":"[url:value = 'http://42.237.34.160:35437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a3860c-f495-b9dd-076f-0000df6a71b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/i","pattern":"[url:value = 'http://110.139.34.163:54048/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c0251f-3034-7d29-9d49-0000909bb3f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.146.90:36045/i","pattern":"[url:value = 'http://123.5.146.90:36045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb9a077-cea8-e276-32d5-0000b9728c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/bin.sh","pattern":"[url:value = 'http://36.26.210.12:56867/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2678a3-9305-70ee-6b46-00001aa3d068","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/i","pattern":"[url:value = 'http://210.208.110.130:49996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4822490-fd0d-a702-aee7-0000fb3bfe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/bin.sh","pattern":"[url:value = 'http://221.14.38.136:39999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88636432-bb88-9d92-2984-000006b3ea99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/bin.sh","pattern":"[url:value = 'http://78.165.96.230:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b7878c-1cee-b01b-863b-00003d9e8fb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/bin.sh","pattern":"[url:value = 'http://98.252.87.232:48523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba1a632-6cc4-3138-eab2-00008a15fc1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/i","pattern":"[url:value = 'http://221.14.38.136:39999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5890b118-f092-172e-6907-0000eb92bb83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/i","pattern":"[url:value = 'http://36.26.210.12:56867/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac03dd6-6dbe-816a-3499-00008cfe86b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/i","pattern":"[url:value = 'http://78.165.96.230:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22bb344a-d765-0da9-a1af-00006ee2d469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/2K4xFEq.bat","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/2K4xFEq.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcfb89e-ce61-8e8b-450a-0000243c2b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/dp.sh","pattern":"[url:value = 'http://194.238.57.124:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--618c5bf5-8669-667a-bc8d-0000fa38bf60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x64","pattern":"[url:value = 'http://194.238.57.124:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a4b554-5eef-95e6-2739-0000d7cafeec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc440","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec11fca-aabb-bd51-c291-00004977aa3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sparc","pattern":"[url:value = 'http://194.238.57.124:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffb4ae4-3a86-fa74-a1d2-00007a64b1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm4","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb32699-b797-e1d6-ec3e-00009702a7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11011757-b194-a724-53eb-0000ef01c98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x86","pattern":"[url:value = 'http://194.238.57.124:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1c4ce-f82b-1edc-3f12-000017dc3e09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sh4","pattern":"[url:value = 'http://194.238.57.124:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f52bc8-1221-94a3-0288-0000d06d794d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm6","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea63534-e4ae-65ed-4437-00004a90cc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.m68k","pattern":"[url:value = 'http://194.238.57.124:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f21b5e-a303-9c3f-f7f6-000068d11e28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm7","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428a01e2-902e-4ab5-1f19-00004a661a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mips","pattern":"[url:value = 'http://194.238.57.124:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fc7a72-a826-762f-6741-0000c2d8d6a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm5","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941e8f2a-639e-ebde-245f-000087b83feb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i686","pattern":"[url:value = 'http://194.238.57.124:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979a5b44-7a32-7eed-d140-0000ca709ee0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i486","pattern":"[url:value = 'http://194.238.57.124:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0618431c-b7a4-2b76-4940-000029729b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mipsel","pattern":"[url:value = 'http://194.238.57.124:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad9d904c-692e-1878-31f7-000072095444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/i","pattern":"[url:value = 'http://98.252.87.232:48523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529ef74a-af0f-01b2-8f3b-0000c53184d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/bin.sh","pattern":"[url:value = 'http://39.74.33.126:60319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ba651d-6a5d-2b5c-5cf5-0000d3b6b05e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.146.78:40164/i","pattern":"[url:value = 'http://27.44.146.78:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f916cf22-5427-b4b5-8c16-00007709a909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/bin.sh","pattern":"[url:value = 'http://27.194.211.108:59780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8683c6-2428-af69-240b-00007521423d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/i","pattern":"[url:value = 'http://39.74.33.126:60319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcad2f0-efbc-a27d-ba81-0000890dba60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.39.1:58961/i","pattern":"[url:value = 'http://125.44.39.1:58961/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97fef9e1-6955-b6bf-36a1-0000c32d7a41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/i","pattern":"[url:value = 'http://27.194.211.108:59780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb597bc9-1b79-d12e-b9c1-0000b474a1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/bin.sh","pattern":"[url:value = 'http://182.116.55.50:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea550ed-d71f-caab-36fd-0000494b0cd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/8EiMnJ7.exe","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/8EiMnJ7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbb9ce4-1be6-a062-47f4-0000dbda92df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/bin.sh","pattern":"[url:value = 'http://123.11.13.6:54335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31ecc05-cfb5-e798-aaa0-00006ffd2287","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/bin.sh","pattern":"[url:value = 'http://115.55.236.112:38216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be950735-a3ca-5848-5151-000019f29367","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/i","pattern":"[url:value = 'http://115.55.236.112:38216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8a9ef8-f9b6-30b1-20d9-0000ad0eaa36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/i","pattern":"[url:value = 'http://123.11.13.6:54335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fd90cc-b54e-fdfe-075d-0000de8e2ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe","pattern":"[url:value = 'https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a092374c-a0f2-a3bc-2ff6-000003f063f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/bin.sh","pattern":"[url:value = 'http://218.13.149.41:34202/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d546336c-7fc1-3153-7184-0000de6ff6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/i","pattern":"[url:value = 'http://218.13.149.41:34202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac8abaa-c60b-73e0-ed7f-0000f8d5b2a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/bin.sh","pattern":"[url:value = 'http://175.173.72.28:43930/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ddf40-a5d6-bd8d-5185-00001145eeb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/i","pattern":"[url:value = 'http://175.173.72.28:43930/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b002974f-41e3-75ef-db5d-00005fbef212","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/bin.sh","pattern":"[url:value = 'http://115.62.190.249:52785/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad7a1b3-a6f9-9932-91fb-00009cc5cf82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/i","pattern":"[url:value = 'http://182.113.33.72:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f559244-c582-8992-d960-0000db932dce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/i","pattern":"[url:value = 'http://115.62.190.249:52785/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b9a47b-d417-37cc-1f69-0000d404b04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.253.62.1:52995/i","pattern":"[url:value = 'http://117.253.62.1:52995/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fbcb70c-dbf0-d066-7fdd-0000943f7b9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/bin.sh","pattern":"[url:value = 'http://42.238.169.3:40436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad604a0-e22e-b5fa-7f6a-000026d2aa01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/i","pattern":"[url:value = 'http://42.238.169.3:40436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2806f6-39ca-0116-baa0-000026d0450e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/bin.sh","pattern":"[url:value = 'http://175.146.159.250:58407/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b242265d-a77b-38cf-fff4-0000cb1e5b67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/bin.sh","pattern":"[url:value = 'http://60.23.123.119:52447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c23709-f301-7b34-fa53-00001eca7db1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/bin.sh","pattern":"[url:value = 'http://221.205.0.233:37221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c649340-78d9-81f1-fa9c-0000945fb4aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm5","pattern":"[url:value = 'http://31.77.227.121/satan_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdae08b6-41a6-5de8-80b7-0000cc12c316","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f9b26a-deab-bd6f-b707-0000a3a48dca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_ppc","pattern":"[url:value = 'http://31.77.227.121/satan_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56dc2fa-d389-66cf-0c73-000086ea1b44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm6","pattern":"[url:value = 'http://31.77.227.121/satan_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6612e8d0-e95d-2878-d1e6-00001ce17854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips","pattern":"[url:value = 'http://31.77.227.121/satan_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6271393b-a2df-b761-6861-0000f5ce83ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/$b","pattern":"[url:value = 'http://31.77.227.134/bins/$b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89334a8-ef24-69fc-37f8-0000f13178a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm","pattern":"[url:value = 'http://31.77.227.121/satan_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3edc06-ff19-3e7c-ca98-00001c17ae8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_m68k","pattern":"[url:value = 'http://31.77.227.121/satan_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd8734e-066a-8e39-2d87-0000026895a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_x86_64","pattern":"[url:value = 'http://31.77.227.121/satan_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb83ff4-9627-e7f2-621a-0000dbdf8f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips_el","pattern":"[url:value = 'http://31.77.227.121/satan_mips_el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b26af26c-ffc4-e7db-9334-00003e567c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm7","pattern":"[url:value = 'http://31.77.227.121/satan_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7632d6a3-adac-1f57-55c4-000030fd95f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sparc","pattern":"[url:value = 'http://31.77.227.121/satan_sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ab503d-2d53-1c61-4ae9-0000237a143c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sh4","pattern":"[url:value = 'http://31.77.227.121/satan_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed971693-d701-7b80-417b-000079d0f0da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/getit.exe","pattern":"[url:value = 'http://178.16.54.109/getit.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa446ab7-7160-f790-b3f9-0000dac4ab65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/gg11","pattern":"[url:value = 'http://194.238.57.124:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3509753-ec7e-2289-b858-0000cfe798cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.74.47.172:6407/linux","pattern":"[url:value = 'http://112.74.47.172:6407/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93edb27a-98d6-c44c-705d-0000a558fa44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd3da97-981f-c806-4475-00006827451d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mips","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22d7d91b-190a-b2a8-34ef-0000ac48303c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7f9faa-c0ed-7416-57f4-000016fa671f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/i","pattern":"[url:value = 'http://175.146.159.250:58407/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f18fad-afa9-3293-0402-00005377cd55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/ChromeReal.exe","pattern":"[url:value = 'https://c2.11179669.cloud/ChromeReal.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2a2e49-780e-8b42-b6ce-00005b813391","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/edgeupd.dat","pattern":"[url:value = 'https://c2.11179669.cloud/edgeupd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f95805-511e-5e06-58ad-000044be1a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/bin.sh","pattern":"[url:value = 'http://88.232.49.106:60233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae844e-71a3-e9ac-d7cc-0000e0f3364f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/bin.sh","pattern":"[url:value = 'http://27.215.210.140:47517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9faaa1d2-7c70-9a6a-1b30-0000fb646331","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/i","pattern":"[url:value = 'http://60.23.123.119:52447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6ab24c-4ec7-2f40-c7d8-0000f66275fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/i","pattern":"[url:value = 'http://221.205.0.233:37221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5500a14b-508d-76d5-d545-00003fa5aa72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/i","pattern":"[url:value = 'http://27.215.210.140:47517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b099d78-7a6f-7eba-d359-000013a730ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/i","pattern":"[url:value = 'http://88.232.49.106:60233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af00a491-81b6-c457-789d-0000c2ccee2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.py","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3550aa9-22c2-6018-0c0f-0000c3316e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.artleadsdigital.com/payloadencrypted.bin","pattern":"[url:value = 'https://www.artleadsdigital.com/payloadencrypted.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f741699-0a36-8466-9df5-00004d44c6bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.bat","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef169ca-1565-a8e7-fc0b-000016cb44c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tattinamecheap.com/QuickFetch.exe","pattern":"[url:value = 'https://tattinamecheap.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c134b4a0-ad51-d359-5750-00008c138706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.2.164:47376/bin.sh","pattern":"[url:value = 'http://123.13.2.164:47376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49df976d-7d95-e021-35e8-00009c15ce0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/bin.sh","pattern":"[url:value = 'http://222.137.172.144:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48cb74e-b296-dc8a-cb99-0000c1f812b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/bin.sh","pattern":"[url:value = 'http://59.97.252.25:32934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6926b946-440d-f455-cc48-0000676b24b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/i","pattern":"[url:value = 'http://27.215.85.41:50026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70f6e17-19cc-8e3c-ceae-000086deab24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88011c5e-cd05-1d79-e6a4-000003242b57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mpsl","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a370a82-6734-a039-0f29-00005495c7bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.sh4","pattern":"[url:value = 'http://18.236.12.51/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a5a107-8010-1dea-7371-0000e09989e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm5","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b74310-7bf1-d677-b710-00006601dc17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f65e8d5-68fe-077e-1c00-0000d44b5e49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.ppc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6837a0cd-33eb-9361-b3f0-00007bbb5933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86_64","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9abc02b-e063-9eb6-66ff-00004a904168","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm7","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eacf0bd-ae84-15e8-ed25-0000f22c260d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm6","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ffee41-de69-9e75-e775-000068d193c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.m68k","pattern":"[url:value = 'http://18.236.12.51/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb24f42c-cdda-c7f9-a38a-000089f23af9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/bin.sh","pattern":"[url:value = 'http://219.157.246.145:56603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c138b81-f232-dc6f-7632-00004848344b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.aarch64","pattern":"[url:value = 'http://167.86.99.169/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a30dbc-e9b7-bfa2-ac87-0000c243ce12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/i","pattern":"[url:value = 'http://59.97.252.25:32934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b377b685-0d58-5085-0870-00006f7671d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/i","pattern":"[url:value = 'http://222.137.172.144:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d14ed9c-f3f2-b63a-ac68-0000f1755dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/bin.sh","pattern":"[url:value = 'http://115.49.94.7:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d982f200-8a36-5eb0-e19e-0000d14a2444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/bin.sh","pattern":"[url:value = 'http://180.115.85.248:45790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7ccc34-0cde-b97b-4814-0000e9e8ad4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/i","pattern":"[url:value = 'http://115.49.94.7:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820b0806-6f8c-bfeb-e1a4-0000aff06a1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/i","pattern":"[url:value = 'http://180.115.85.248:45790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39402dbb-30a6-a442-b751-00006b8b4f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.140:55161/bin.sh","pattern":"[url:value = 'http://59.96.140.140:55161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5ccf79-598f-e654-4640-000081e9c0b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77150455-b77e-7d32-b2c8-000097b0886d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/bin.sh","pattern":"[url:value = 'http://182.126.119.188:36580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d195cb-7ffd-ab69-3c91-0000946ea091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.47.120.247:39556/i","pattern":"[url:value = 'http://58.47.120.247:39556/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--729c76a3-affd-215a-45f0-0000af94a7fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d18b9d5-82a9-4b86-6ab9-0000595f3f8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84f2db7-c059-f47e-e406-0000f22eab7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebdccba-1b50-1cee-0732-0000ee206975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6345f5-c97a-8abe-3128-00001ecc7f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94ccc25-d612-73df-ee47-0000d2d554a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73650c25-4d36-db16-f13d-00005b9d1b0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3a0561-56d5-a2b9-296a-00000618c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7628eff0-eec4-647d-12c1-0000ade171d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed21ed5-8828-9797-003f-0000c3a83edc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd9705-236d-00da-3b91-00000fb115e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31fe1e7b-7f68-fdf7-826d-0000229622ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe","pattern":"[url:value = 'https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b40353-8cd3-4105-88c9-00007dadf192","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fc272b-d5cb-b8f6-a59b-0000aea0e024","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d860f36-0e24-8291-0ee5-000057d3e61b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.18:32896/bin.sh","pattern":"[url:value = 'http://120.84.213.18:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f335026-8fff-5746-55b0-0000cddd4321","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/bin.sh","pattern":"[url:value = 'http://222.140.156.149:50285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed6992eb-5359-152f-b147-000026d84b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://teakivo.com//wp-content/bin.exe","pattern":"[url:value = 'https://teakivo.com//wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0679d0e2-d0ac-7721-3f27-0000f6f14de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/litxwnimg_082224.png","pattern":"[url:value = 'https://sunix-technology.com/images/litxwnimg_082224.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44308ea1-8fe4-fd13-fa8c-0000af15f7d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/MSI_PRO.png","pattern":"[url:value = 'https://sunix-technology.com/images/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7425049-15c4-a802-3386-0000a9548ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/Setup.rar","pattern":"[url:value = 'https://winds11.site/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7259107-951d-8b4d-0c22-0000d2673c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/bin.sh","pattern":"[url:value = 'http://125.41.1.44:45185/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d410851a-e00d-6808-0477-0000be841fb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/i","pattern":"[url:value = 'http://222.140.156.149:50285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--793d7cd0-90a9-e920-5800-0000a21d0a0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaf3827-de05-4404-f5f1-0000988217f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75cb2b60-335f-ec03-e728-0000c66768aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/i","pattern":"[url:value = 'http://125.41.1.44:45185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe797da-8e88-1af1-ba34-000074069eb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baileyemas.com/vlc.zip","pattern":"[url:value = 'https://baileyemas.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2e538b-321f-291f-d59e-00005456b28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/bin.sh","pattern":"[url:value = 'http://105.184.157.90:46817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca07fb0e-5ada-ccc9-9f35-000097c4c5bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/i","pattern":"[url:value = 'http://112.232.226.68:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3205ac62-3747-0b6f-853b-0000cdfd5db8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/bin.sh","pattern":"[url:value = 'http://115.49.28.151:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62cadd80-4c04-dc58-566f-00005a64ceb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/r","pattern":"[url:value = 'http://31.77.227.102/r']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfd8af1-14f4-43a0-e271-00004210a275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/jaws.sh","pattern":"[url:value = 'http://31.77.227.102/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67443ed4-08c6-fe22-0e60-00004e8246d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dl","pattern":"[url:value = 'http://31.77.227.102/dl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b09b55ba-47aa-50c8-49ad-00009caedd05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/routerip.sh","pattern":"[url:value = 'http://31.77.227.102/routerip.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a645d6-e33a-1368-2ce4-0000cfc9b1c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/j","pattern":"[url:value = 'http://31.77.227.102/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2103cd-18cb-df96-f2ef-00000a4503bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.128.27:34669/i","pattern":"[url:value = 'http://42.86.128.27:34669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112891cc-ad23-1079-8f6c-0000312c393a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59900/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852b410f-45bb-4bb6-b6fb-0000baf48512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/bin.sh","pattern":"[url:value = 'http://182.121.171.163:58015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e42f5df-af27-3c77-37fc-000083ba02f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/bin.sh","pattern":"[url:value = 'http://60.177.244.198:55825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3ccf93-0352-a319-355b-0000682ef4cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmips","pattern":"[url:value = 'http://31.77.227.134/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb5f17-8d24-a18a-3389-0000fa539afc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/bin.sh","pattern":"[url:value = 'http://42.58.252.41:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2debcecc-8579-93f3-6f65-00000e62eb97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.37.102.157:50864/i","pattern":"[url:value = 'http://27.37.102.157:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e839c7f-80b7-8956-6046-0000029e7d41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/bin.sh","pattern":"[url:value = 'http://66.212.173.225:35221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1f7e4-aabc-d892-00cc-0000f0b4a84d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.31.160:24414/s/linux","pattern":"[url:value = 'http://194.59.31.160:24414/s/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724a26a3-7be7-8e09-d517-00007a9f8d4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.159.117:41888/bin.sh","pattern":"[url:value = 'http://42.239.159.117:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1074f661-3d58-fa3f-49fe-0000a8ed17b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/i","pattern":"[url:value = 'http://42.232.181.83:55625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc01f284-ea0a-12b0-dca1-000043c745e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.194.206:50377/bin.sh","pattern":"[url:value = 'http://60.23.194.206:50377/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f6715f-d596-08e1-fc2b-0000f16c33eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/i","pattern":"[url:value = 'http://37.78.12.145:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--541b1d3d-f021-b446-0210-0000adcc96c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/bin.sh","pattern":"[url:value = 'http://182.245.28.97:40240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ae7fc-c50f-7f0e-079f-0000cf9e02d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://79.135.225.50:13477/.i","pattern":"[url:value = 'http://79.135.225.50:13477/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc01576-3478-dac5-dfff-000008db75d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/i","pattern":"[url:value = 'http://122.139.14.243:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66756c60-18f6-23da-ee49-000055862ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bash.sh","pattern":"[url:value = 'http://132.243.200.43/nullnet_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80610f18-2e57-fab7-2f6c-00005b6efae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pspc","pattern":"[url:value = 'http://31.77.227.134/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fbc277-b464-5145-f349-0000766ba5c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/i","pattern":"[url:value = 'http://115.60.200.162:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b7b821-9e05-978e-c4ba-0000b4e06ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fcd50d0-e3ed-e646-6376-0000269193a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/bin.sh","pattern":"[url:value = 'http://39.79.195.66:54804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f10678-2830-8922-48c7-00003274190d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152ec4-a5f9-f853-eeb9-0000040a9652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.6:38860/i","pattern":"[url:value = 'http://221.15.12.6:38860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb650a14-9fb6-d4df-1ad8-0000286e3394","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87493ec2-d107-3af9-7b97-00002898e54e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3665b8bf-8651-98f4-f885-00002bb04dd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.61.92.78:58321/i","pattern":"[url:value = 'http://111.61.92.78:58321/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a478f628-eede-b060-e88a-0000de10ed67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/bin.sh","pattern":"[url:value = 'http://119.178.149.31:33483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa778e6-444a-a7b3-f7fb-0000f64d2c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/bin.sh","pattern":"[url:value = 'http://115.55.59.69:53574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7f3fa-b371-1372-aa43-000076b456f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/i","pattern":"[url:value = 'http://42.232.236.105:33973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570e850c-88c5-416c-7629-00005c20fd94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/bin.sh","pattern":"[url:value = 'http://182.121.246.143:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab677755-f7b8-8694-51ed-00002da9b294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.141.218:40057/i","pattern":"[url:value = 'http://61.53.141.218:40057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e47e0a-ce05-6b96-7d5b-0000ef3ab272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/bin.sh","pattern":"[url:value = 'http://125.41.109.138:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e55a76-6f19-60ce-2480-0000343ef255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2282222d-5b27-752f-2804-000060e73413","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://72.29.46.195:43633/i","pattern":"[url:value = 'http://72.29.46.195:43633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fe5034-4509-056f-b5e4-000037aa8a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/bin.sh","pattern":"[url:value = 'http://37.78.12.145:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ecf4763-20a3-a461-8313-00000a0436ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/bin.sh","pattern":"[url:value = 'http://125.43.106.217:44114/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e44d52f-5ea5-e89c-0a68-00004a99f0be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/parm7","pattern":"[url:value = 'http://31.77.227.134/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eab8e89-86aa-bbfc-8d0d-0000fe96aa2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/i","pattern":"[url:value = 'http://123.9.81.188:52368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e497e4ba-8925-a2b4-17a1-000068c60e83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/bin.sh","pattern":"[url:value = 'http://222.139.229.134:40628/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40560bfc-d62d-0c32-7b76-00002954e250","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/i","pattern":"[url:value = 'http://182.245.28.97:40240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9cc9221-21be-91f7-597e-00001c5c0f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/bin.sh","pattern":"[url:value = 'http://123.9.81.188:52368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a164e215-924c-9175-de0d-0000c80c10bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/bin.sh","pattern":"[url:value = 'http://115.54.162.45:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e44a53-b79f-8adf-c0d4-0000377d5430","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/i","pattern":"[url:value = 'http://125.41.109.138:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a4d3d9-c010-f011-82a3-00000d80ba89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.40.34:41510/i","pattern":"[url:value = 'http://110.136.40.34:41510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e7d40c-fe1f-ce84-0e17-00002656cb33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/i","pattern":"[url:value = 'http://115.49.73.173:58794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61541e15-aac6-68b5-ee47-000056dc8e66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/bin.sh","pattern":"[url:value = 'http://42.230.218.53:49708/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c00010a-e100-e63e-f519-0000e0faf145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/i","pattern":"[url:value = 'http://115.50.68.3:50876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cee274-0846-2a1d-09ae-0000b71afb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.70:35378/i","pattern":"[url:value = 'http://120.84.214.70:35378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af003e1-824e-86f1-44d0-0000cac65ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.86.128.27:34669/bin.sh","pattern":"[url:value = 'http://42.86.128.27:34669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ea38a9-4509-395b-8bed-0000759f948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/i","pattern":"[url:value = 'http://123.5.153.225:57640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af9c557-1adb-dfe4-593b-0000ef691432","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/i","pattern":"[url:value = 'http://182.121.246.143:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a07c22-6a17-81fc-dc6f-00009ae3429b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/bin.sh","pattern":"[url:value = 'http://27.215.85.41:50026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d85d007b-de0d-ae2d-7ae6-0000b908ef8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/i","pattern":"[url:value = 'http://222.141.120.242:36425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e77acea-8827-1f0a-de0b-00009cd0079c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.40.180.63:47173/i","pattern":"[url:value = 'http://39.40.180.63:47173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--089c9527-31c4-9280-e2d0-00003cfbb4f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680589ef-0b3f-e5a2-7fdc-0000cce305d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01012c8f-a380-e93a-da4d-00005029422a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.31.114:44907/i","pattern":"[url:value = 'http://182.113.31.114:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1e5d23-6d3c-60de-275c-00003b67a3d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/bin.sh","pattern":"[url:value = 'http://42.54.8.116:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4237ef-a23f-3067-266a-00005e1d5245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.58.130.128:38469/i","pattern":"[url:value = 'http://113.58.130.128:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef5c6ce-051f-6572-73f1-00003f3088a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.7.157.56:57185/i","pattern":"[url:value = 'http://27.7.157.56:57185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41537338-9943-cba2-f0d8-0000287edbbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/bin.sh","pattern":"[url:value = 'http://222.142.252.154:39030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3675fb05-a3f6-78fd-8c14-0000259a3ab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/bin.sh","pattern":"[url:value = 'http://42.237.83.89:55341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54347593-159f-6ba6-627b-000078df3a55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/i","pattern":"[url:value = 'http://115.54.162.45:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8227b141-8d15-37bd-d0e7-0000ddfa8849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pppc","pattern":"[url:value = 'http://31.77.227.134/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85397897-3b82-389a-ef2a-0000b4c990a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/i","pattern":"[url:value = 'http://42.237.83.89:55341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3f4552-17e8-4270-deba-0000a02629b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--237dfcad-200b-f62e-a47f-0000b36b288e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/i","pattern":"[url:value = 'http://60.18.84.125:39736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86da3ba-d7b4-2e44-b45a-00008a96cc7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/syss","pattern":"[url:value = 'http://61.184.10.103/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7755316-9df4-db80-4a99-00005d2411bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/psh4","pattern":"[url:value = 'http://31.77.227.134/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--243614e8-d1ba-a2ce-5457-0000b293865e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afb8855-5747-2660-acf1-000047349028","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.153.54:53457/i","pattern":"[url:value = 'http://222.137.153.54:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b0eb23-fa99-61f3-38b6-0000b896249c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/i","pattern":"[url:value = 'http://222.142.252.154:39030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d6415e-5351-8410-99c2-000014864f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/i","pattern":"[url:value = 'http://115.49.28.151:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3d3571-bb65-d0a1-880f-00005b1cc9b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/amd","pattern":"[url:value = 'http://61.184.10.103/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a6513e4-b356-d65c-8192-000006aae9fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65397701-e784-575c-d513-0000cacf48c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/bin.sh","pattern":"[url:value = 'http://117.146.92.46:56049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3511194d-a95c-f181-ffac-00007d84d2e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/bin.sh","pattern":"[url:value = 'http://222.141.120.242:36425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f3ff3c-6c1f-e395-3f9a-00006e970706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/bin.sh","pattern":"[url:value = 'http://42.232.181.83:55625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53c3b1-8754-d839-a659-0000225f55c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/bin.sh","pattern":"[url:value = 'http://210.208.110.130:49996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c5b898-1bd0-c07b-0307-0000c064beac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/i","pattern":"[url:value = 'http://125.43.106.217:44114/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6215f19-23de-ff3e-5b5e-000096cb8c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:43450/i","pattern":"[url:value = 'http://196.189.130.28:43450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61963dac-1e95-f102-a543-000057909f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/i","pattern":"[url:value = 'http://119.178.149.31:33483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d65a194-7b36-c36d-c192-000084a84d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/i","pattern":"[url:value = 'http://61.137.198.130:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b3c650-840f-a70e-3197-00005702f971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.238.108.90:47368/i","pattern":"[url:value = 'http://112.238.108.90:47368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5331247e-ed7b-6eca-dd7d-00000a2fe13b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8610fb45-2ffc-c95c-3727-000068d82211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pm68k","pattern":"[url:value = 'http://31.77.227.134/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e804b92d-2838-bc28-a500-0000f689411d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/i","pattern":"[url:value = 'http://42.87.111.88:33491/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ca5344-b98b-a9d9-d817-000069c24529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/bin.sh","pattern":"[url:value = 'http://182.113.33.72:34879/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329bf80b-7117-7d91-0450-0000439b8b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee095a-c9df-2214-32ec-0000032d9a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.134/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b095e86e-8592-e1de-0b45-0000a0fdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/bin.sh","pattern":"[url:value = 'http://115.60.200.162:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a5f273d-8988-4ee3-2628-0000f9d4cd67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/i","pattern":"[url:value = 'http://39.79.195.66:54804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68021fa4-ae60-bd62-bf18-00000953dfc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/i","pattern":"[url:value = 'http://125.43.38.255:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47daf53-b729-cb7a-40f1-00009da77814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/bin.sh","pattern":"[url:value = 'http://120.28.194.30:35812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597aeb1a-37d1-07a3-9942-0000e89dd154","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/i","pattern":"[url:value = 'http://115.55.59.69:53574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311d889c-c3ef-c8ae-1ea2-000090237a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.29.39.213:56148/i","pattern":"[url:value = 'http://78.29.39.213:56148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7107359-ef34-8098-4dbb-00008ebe6a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/bin.sh","pattern":"[url:value = 'http://115.50.68.3:50876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff8f7a9-386f-5959-92d6-0000ca442e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/i","pattern":"[url:value = 'http://42.54.8.116:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e72c9b4-2aad-6158-6487-000092126f2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/i","pattern":"[url:value = 'http://202.163.107.242:56229/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8103f53f-4da5-4c84-3518-00002b83a3c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/i","pattern":"[url:value = 'http://222.137.105.253:46499/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ad86a6-c537-f6d8-509a-0000ec3d84a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.71.0.131:9935/linux","pattern":"[url:value = 'http://120.71.0.131:9935/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2481e4f6-ed25-b6eb-2db1-0000e592cfb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/bin.sh","pattern":"[url:value = 'http://222.137.105.253:46499/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52596464-4e8e-43ab-77e4-0000a88e61f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30da26d2-f721-99ab-39a4-0000dfa31c2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.242.40:51278/i","pattern":"[url:value = 'http://182.126.242.40:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8441bfa2-00bc-6ee0-7087-00004c0c0f55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.159.98.16/daemonc","pattern":"[url:value = 'http://94.159.98.16/daemonc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636f0ead-6c94-2dbd-59c3-00006658dab9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.34.84:34056/i","pattern":"[url:value = 'http://60.17.34.84:34056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35fc90f-9eda-39fa-d4ee-00001ec62232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.107.97:43395/bin.sh","pattern":"[url:value = 'http://61.53.107.97:43395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdd4c2f-b2de-be04-5e45-000063c9eaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/bin.sh","pattern":"[url:value = 'http://123.5.153.225:57640/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d09c6d4-6155-a86d-7903-00009a8a1073","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/i","pattern":"[url:value = 'http://123.190.17.0:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4381cb14-a58b-d89c-a9f5-00005de8f372","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/bin.sh","pattern":"[url:value = 'http://42.59.204.16:37885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddd3ee3-0e39-a866-9560-0000e6759ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51ddb00a-e17d-97eb-b3ae-0000e546c0f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d27d773-da73-f092-8afe-0000c9b27549","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/bin.sh","pattern":"[url:value = 'http://66.8.135.142:41648/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bf48bf-b08e-f63b-829e-0000590a97c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/i","pattern":"[url:value = 'http://105.184.157.90:46817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec31238-843c-c8aa-9dd9-0000a4971271","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/i","pattern":"[url:value = 'http://117.146.92.46:56049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb6cae8-c405-6232-00b1-00004090ed80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/bin.sh","pattern":"[url:value = 'http://221.15.253.184:44790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1f3eca-733a-b813-0643-0000a483401f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/bin.sh","pattern":"[url:value = 'http://221.15.11.240:40642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024707cd-ed9a-e148-708e-0000caf8024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/i","pattern":"[url:value = 'http://66.8.135.142:41648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8b1954-56b6-f896-35b0-00007ea930e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/bin.sh","pattern":"[url:value = 'http://114.221.254.230:54765/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e89bf4-2939-123f-2d67-00007adfa751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/i","pattern":"[url:value = 'http://221.15.253.184:44790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37bed72c-baec-734b-9736-00002781374e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.191:50908/i","pattern":"[url:value = 'http://115.48.144.191:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f321138e-8347-09f1-49bf-0000325b221b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/bin.sh","pattern":"[url:value = 'http://123.7.241.28:50935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92948ddd-134d-baa4-9fb7-000008685204","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.27.152:52881/i","pattern":"[url:value = 'http://105.184.27.152:52881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006ac580-a626-3cfc-f069-00000ea9f563","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/bin.sh","pattern":"[url:value = 'http://182.240.9.116:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5960819f-cfb6-36e7-7cb3-00006d137268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/bin.sh","pattern":"[url:value = 'http://115.55.10.180:53804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adef1928-9f08-bd64-dc3c-0000699d04aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/i","pattern":"[url:value = 'http://123.7.241.28:50935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504fd149-9148-f796-4de6-0000f57d5bee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.173.11:52595/i","pattern":"[url:value = 'http://42.224.173.11:52595/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3191bf0-c8fc-cbc1-3eab-00008cef55e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/bin.sh","pattern":"[url:value = 'http://115.59.34.198:49461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522e4b8a-14db-01cc-f811-0000d78f40ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/i","pattern":"[url:value = 'http://114.221.254.230:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f576b9a-7d05-8817-a5b9-000077f40efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/bin.sh","pattern":"[url:value = 'http://115.56.174.13:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d132bf-41a0-5df4-a0a2-000026d04ab5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/i","pattern":"[url:value = 'http://221.15.11.240:40642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637d56f1-5b47-ee1f-e986-00008225ab79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b66d39-19d9-232e-a825-00002d9d9815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a42f-a81c-b84b-5fe4-0000b3072d8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/i","pattern":"[url:value = 'http://115.55.10.180:53804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceeb38-6443-dbdd-b201-00001f58343a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.94:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb30c5df-bd77-30f2-ced3-0000e2f724ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/bin.sh","pattern":"[url:value = 'http://175.148.157.224:54842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3221481e-3b82-252c-ae78-000096071eb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/i","pattern":"[url:value = 'http://115.59.34.198:49461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c30d0f-5684-8388-220c-000048e9ef30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/i","pattern":"[url:value = 'http://115.56.174.13:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b8e631-8a9f-1a82-216c-00001c41a5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.143.200:56878/i","pattern":"[url:value = 'http://59.96.143.200:56878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1289704e-6e49-4204-177c-00003529a704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/bin.sh","pattern":"[url:value = 'http://125.42.27.234:57981/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad7fc21-51b1-f174-b424-00006d478025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/bin.sh","pattern":"[url:value = 'http://115.55.193.225:54553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb63466-37d6-4e47-ad38-0000210417fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.143.40:35243/i","pattern":"[url:value = 'http://115.48.143.40:35243/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cd897a-dcd3-b782-9e10-0000a2843597","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.203:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.203:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf6b408-d9c1-9344-4fe7-00002e12280f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/i","pattern":"[url:value = 'http://125.42.27.234:57981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4016593f-1f13-968c-1f7d-000044ecb40f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/i","pattern":"[url:value = 'http://175.148.157.224:54842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c35056-47af-24db-9830-00002491d9d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat","pattern":"[url:value = 'https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a896049-eb99-3424-a5c6-00007aa4a398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dfc8e2-9ca8-bdeb-d1b5-00004b5fd33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/i","pattern":"[url:value = 'http://115.55.193.225:54553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea46145-966d-8e84-8761-00002f7a376c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/bin.sh","pattern":"[url:value = 'http://116.55.72.18:38032/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f6ff70-5b54-8622-5b83-0000677d87d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.76.176:57084/i","pattern":"[url:value = 'http://222.139.76.176:57084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6122b0-41e4-2ad4-d44a-0000ac2fac0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/i","pattern":"[url:value = 'http://182.121.171.163:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0bb8e0-b1ed-ea41-3321-0000e65a6819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/bin.sh","pattern":"[url:value = 'http://42.232.236.105:33973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8d896b-59fe-88ea-7f88-0000c9bcbded","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/i","pattern":"[url:value = 'http://116.55.72.18:38032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7fe02-8bd9-5fd7-c404-000043a32a7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/bin.sh","pattern":"[url:value = 'http://60.17.83.99:51270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3e8c252-cc26-8e0a-902e-0000cc536055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/bin.sh","pattern":"[url:value = 'http://79.106.74.167:44091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8dcbe-bfdd-78d8-7c1f-00009e3346b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/bin.sh","pattern":"[url:value = 'http://219.155.12.214:51034/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724bd93e-f5eb-3dd9-aebf-00006b776b08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.227/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66847f31-3fe3-082c-1643-000093ade86f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d979727-61ef-541d-6f9b-0000991f0f6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/bin/support.client.exe","pattern":"[url:value = 'http://178.16.52.133/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8f378c-b5cf-1108-269e-0000f1599954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330fdd3e-2de6-d5ec-4ed0-00007eaa2bc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.ppc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca3059a-398a-d252-0c85-0000365a7e43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.i686","pattern":"[url:value = 'http://176.65.139.133/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe54d9b-c8c0-9440-caae-0000908735bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mpsl","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c644f166-5e5b-9279-5ee3-0000c43aa78f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/debug","pattern":"[url:value = 'http://176.65.139.133/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d6d540-a651-8237-39b0-000017138e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86_64","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ebdecf0-6cdf-3dfc-922b-000006a945b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a378b52-9768-4026-58cf-0000fb845bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mips","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3041f0c2-88bc-5d8e-870d-0000733a970b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm5","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4f91ee-7e36-5a85-9ae7-0000d9335f80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm7","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdd76fb-cad7-57e2-1448-0000cce0a99a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb655bfc-ab8a-fd51-433d-00002c3fdea9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b842f81-16e3-c0df-b940-0000ec484b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz.sh","pattern":"[url:value = 'http://176.65.139.133/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465d3f69-1df4-f8c1-9d8f-0000fe74b232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.sh4","pattern":"[url:value = 'http://176.65.139.133/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31496367-4363-9939-a1ed-0000f83e596a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.spc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--461bbf84-0835-ce69-8bac-0000fb728d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.m68k","pattern":"[url:value = 'http://176.65.139.133/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a948a178-628b-ab90-334c-0000618f38e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm6","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930715e3-fe32-ed49-ff2d-0000f6035873","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a35456-a9fa-c7bd-292c-00000d4f7db7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.64/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ea9738-3899-1d75-1bf1-0000a0d1e634","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/i","pattern":"[url:value = 'http://60.17.83.99:51270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6e4dd8-c8b1-d245-3387-000098315cda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.172/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ed5670-6287-1940-2e39-000092dd4970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a55d54-6399-14d5-59ba-0000366ab7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8f910c-1e30-ea71-2ca4-0000e831998c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d30629da-564a-800b-1613-0000d94dcf45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.23/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.23/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--609c563b-4a14-16e8-6602-0000c9106a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de06326-3bbe-2ff5-5328-0000266ca58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8133118018/7hc0ffr.exe","pattern":"[url:value = 'http://62.60.226.140/files/8133118018/7hc0ffr.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99c922b-5659-cf74-a208-00007aa0db81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca1780c4-de0a-8b9b-8cd4-0000da806674","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/bin/support.client.exe","pattern":"[url:value = 'https://84.200.80.106/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee6d224-6e72-a41e-2dcb-000031554bdc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/bin/support.client.exe","pattern":"[url:value = 'https://79.133.57.37/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a94d1c-d2a9-514d-66b7-00000b9735ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38aa0258-f0e9-cc1d-ab05-000092ec12ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R6.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c77807-a1fc-ca2b-c14f-000013dff79e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9bf3-b8e4-7984-29cf-0000e02f5556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ca2be8-3b75-9b57-7dad-00005e461274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31243ead-75aa-9aec-8fe8-000058107400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9c3940-8aff-8d57-21e6-000073d19a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.65.215:34323/i","pattern":"[url:value = 'http://42.54.65.215:34323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb6c649-9f01-f63d-2861-0000349f95bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.29.33.253:58457/i","pattern":"[url:value = 'http://27.29.33.253:58457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07b9b21-8e9a-5d1c-e0f0-0000989b92ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b020a23b-ca2f-f79f-8d7d-00007b17b1cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0a0a13-264c-ef1f-e078-0000f02c598f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f92835-9000-91b0-1336-00004fea86e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd845a7f-d56f-7a0f-2c58-0000015a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fddcb8-9408-2830-226d-0000d1baeefd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6537684c-ebe7-01f7-c65c-0000986f75cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a883181-084d-9a2a-8547-000031bf38b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/bin/support.client.exe","pattern":"[url:value = 'https://192.142.53.225/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703d0d59-5f0f-2d2e-8059-00007add62bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea5f9d7-8863-473f-0df3-00001f726b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/i","pattern":"[url:value = 'http://219.155.12.214:51034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b38426f-83c5-699e-9b11-00005db05cb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.58.56.49/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://2.58.56.49/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5eb7139-92de-0ebd-da31-0000de30e843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/bin.sh","pattern":"[url:value = 'http://125.43.38.255:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a769c912-6683-2b17-5526-0000c58287ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/bin.sh","pattern":"[url:value = 'http://42.224.121.161:40429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68bd94a-c8b2-0ecd-a05f-0000a3eb69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:55397/i","pattern":"[url:value = 'http://156.146.26.225:55397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb8a37a-2b18-0bae-b3f2-0000ed807ce0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/i","pattern":"[url:value = 'http://42.224.121.161:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39cc9317-86c4-253b-c576-000025a1a720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/bin.sh","pattern":"[url:value = 'http://222.141.22.9:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a51b53a-fead-bf40-22d8-000058541eed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/i","pattern":"[url:value = 'http://60.217.123.198:46902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94b0902-893f-fa85-d731-0000c73eb268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://scuttlepopdownload.monster","pattern":"[url:value = 'http://scuttlepopdownload.monster']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4397433f-bb4c-29ae-4448-00006e7efd61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://daleeby.com/R4JnneaiZebrwCkgG","pattern":"[url:value = 'https://daleeby.com/R4JnneaiZebrwCkgG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14527404-fff9-8ca2-8fa1-00003d49614c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.101/Servicer.apk","pattern":"[url:value = 'http://77.239.124.101/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b125c32-4c18-3c74-e2dd-0000362e170b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat","pattern":"[url:value = 'https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4a3153-6192-8235-0ce5-0000cad87a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mpsl","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382b4f69-05cc-f046-0a35-0000682d1fb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be0ed26-6cf2-80e2-d1eb-0000836c10ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm7","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f1d27a-0385-7a8c-dc1c-0000d4a4cdc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/ven9392.exe","pattern":"[url:value = 'https://62.60.226.185/ven9392.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c24b3b87-cc7b-8a21-0bbc-0000cdb03f49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/s0907.exe","pattern":"[url:value = 'https://62.60.226.185/s0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62a564e-0200-ce7f-39d2-0000b928d6c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/t0907.exe","pattern":"[url:value = 'https://62.60.226.185/t0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ee8c0a-2136-9990-6ea5-00002965d825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm5","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce7ddb0-165c-335a-fe7c-00003bd077cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm6","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e70b47-6ca5-5fe1-9161-00005c39704f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd2af5e-172c-1d05-cfba-0000d3165561","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b4c34c-569a-c0c5-c781-0000a12dc201","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.m68k","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513fbc4b-d4a6-ba4f-054e-000076afeb57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5a9cba-f5f5-b57a-f8ee-00006af543e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99553a89-4581-7cbb-8b45-0000243a1e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec07d8de-6724-b433-5bd7-0000a4e487cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.sh4","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f98f79a-32b2-d751-9df7-0000a1db14db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43269882-290a-d7bf-84cf-00007d520fec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.s390x","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e186d99-8351-abf0-5de0-0000c58b4b23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat","pattern":"[url:value = 'https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a047b2ec-8536-357e-944f-00006ac574c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://wer-ldr.duckdns.org/b.sh","pattern":"[url:value = 'http://wer-ldr.duckdns.org/b.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9846e0be-82a8-844c-affa-0000fa778165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86_64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1384d0-6bc8-e738-27e3-0000a2ae6c94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.spc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a454d4a-18f0-1afd-5eea-0000ca1ac9b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/bin.sh","pattern":"[url:value = 'http://115.49.7.198:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538d9b3c-5152-e97b-8b8e-0000d8bbf545","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://verifyidentify.com/check","pattern":"[url:value = 'https://verifyidentify.com/check']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66995323-ff95-bd65-8b64-0000d6389806","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://akb.cat/N330","pattern":"[url:value = 'http://akb.cat/N330']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3e11af-2223-f5af-4639-0000b4ea6142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/bin.sh","pattern":"[url:value = 'http://210.208.110.42:56390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--877789d3-b0f1-a17b-e366-00005f9909dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.68.231:52921/i","pattern":"[url:value = 'http://123.11.68.231:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a56d3aa-b832-52d9-2dcf-00000884ff0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/i","pattern":"[url:value = 'http://210.208.110.42:56390/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8a76a1-0ae5-dee7-2cc2-000058c4c65b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/bin.sh","pattern":"[url:value = 'http://182.127.115.109:39219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39889fc2-88e8-0590-32e5-000073e79a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.justturtle.com/indie.exe","pattern":"[url:value = 'http://www.justturtle.com/indie.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864802da-813d-5bc9-0d20-00003e595eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/i","pattern":"[url:value = 'http://182.127.115.109:39219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7a1fee-c173-90bc-9f4b-00002a802ef5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/bin.sh","pattern":"[url:value = 'http://119.185.241.8:42488/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51ab281-c6e5-78f8-7d8c-00003f10018c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/i","pattern":"[url:value = 'http://58.255.41.239:39378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e18902-f7fb-d4a4-85da-0000cabe605e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977f368b-2610-6fc6-6fa2-000050b04c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1e267d-b4bb-652d-8126-0000918e0080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b173f144-9c30-7406-0d19-0000474e9079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/bin.sh","pattern":"[url:value = 'http://125.40.68.15:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10793c01-44fb-176e-1786-0000af9e9fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab6b2b9d-4801-a599-4848-0000adad2b1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51f6cc55-fafb-d256-1631-0000ad9066cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c4b243-1129-a9e7-13e7-0000cc50bcd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.148.3/70/img_222651.png","pattern":"[url:value = 'http://23.94.148.3/70/img_222651.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b5097-e7e5-7ada-29f9-00004a283e95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pic.li/images/MSI_PRO_Last.jpeg","pattern":"[url:value = 'https://pic.li/images/MSI_PRO_Last.jpeg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f160ce46-09fc-9d8e-d5d2-000098aa2fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/upd","pattern":"[url:value = 'http://103.229.53.84:8443/upd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcd8c9f-f7b3-02cb-dd5b-000070dad3b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/update.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0428d26e-85bb-6dfb-e0cc-00003084ace7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/dll","pattern":"[url:value = 'http://103.229.53.84:8443/dll']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c376189-bc62-195d-34c1-0000dec99a04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/r.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/r.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3547e754-a2ed-1d4a-e9d1-0000664472ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/run.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/run.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a763c74a-477a-ff13-ef00-0000d97b3c74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/enc","pattern":"[url:value = 'http://103.229.53.84:8443/enc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afda0505-498e-7123-a458-0000e9cc4865","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/package.zip","pattern":"[url:value = 'http://103.229.53.84:8443/package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d71592d6-2290-fe48-4ab0-000053d80088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/chromelevator_x64.exe","pattern":"[url:value = 'http://103.229.53.84:8443/chromelevator_x64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87ad1c4-335d-0ed9-fa48-00004a231786","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/data","pattern":"[url:value = 'http://103.229.53.84:8443/data']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93dc3bb5-593b-9911-71f3-000084340801","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/bin","pattern":"[url:value = 'http://103.229.53.84:8443/bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e427c3a-17f6-b245-44da-0000c6d233a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/i","pattern":"[url:value = 'http://125.40.68.15:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b7b338-ff65-551b-4711-000044e32a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/config.bin","pattern":"[url:value = 'http://196.251.107.186/zs/config.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152da76b-7f14-28d5-c3f2-0000146d1721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/uniform_4.44_INSTALL.exe","pattern":"[url:value = 'http://196.251.107.186/uniform_4.44_INSTALL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc6614f2-3093-3420-1f07-0000c849f1f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clpr6.exe","pattern":"[url:value = 'http://196.251.107.186/clpr6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be063531-6fcf-b8ad-6d49-00009a8dad34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e519e23-7ed1-c708-1264-00003dd37b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta","pattern":"[url:value = 'https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e122262f-8b03-7015-b65c-0000d1d98652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://one-graup.com/LUI.hta","pattern":"[url:value = 'https://one-graup.com/LUI.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1698b0a3-07a6-36b7-c947-00003559134f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4227670f-d5cb-079f-a76d-0000709c4ada","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/i","pattern":"[url:value = 'http://119.185.241.8:42488/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409532a8-f133-5e05-2bfa-00004e087a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/bin.sh","pattern":"[url:value = 'http://58.255.41.239:39378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7d41e5-de40-7687-8020-00009c8924ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/bin.sh","pattern":"[url:value = 'http://42.231.190.213:48304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabedb4a-5aed-925c-508a-0000c76ecf1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.182.97.242:3654/i","pattern":"[url:value = 'http://163.182.97.242:3654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c804b24-5149-342b-bb3a-00003507be00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/i","pattern":"[url:value = 'http://42.231.190.213:48304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c1f283f-04dd-8977-1ab4-00000b144460","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.26.85:51916/i","pattern":"[url:value = 'http://42.5.26.85:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1c19c4-fd16-7c44-ee12-0000edd18e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/bin.sh","pattern":"[url:value = 'http://182.123.210.94:55730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1ae60-d3f9-12df-ad56-00007df1fd0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/bin.sh","pattern":"[url:value = 'http://27.37.229.46:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce792ca-223d-e9c1-e5cb-00001557c977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.218.95:36712/i","pattern":"[url:value = 'http://42.231.218.95:36712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e746faf4-4f7d-0d8f-280a-0000375773d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/i","pattern":"[url:value = 'http://27.37.229.46:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c185077d-9ba8-7f0c-035c-00007acc5f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/i","pattern":"[url:value = 'http://182.123.210.94:55730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb31b5-9ecf-f93b-59e4-0000c66645d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://154.90.70.52/xmrig.sh","pattern":"[url:value = 'http://154.90.70.52/xmrig.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117caa21-571c-6ec7-556e-0000c0a2001c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/bin.sh","pattern":"[url:value = 'http://122.241.88.111:37163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dff80cf-efb3-cf4b-7585-00007804e368","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/i","pattern":"[url:value = 'http://222.138.103.241:51367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4b4a2-06ed-4ec7-85b8-00007f98c067","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/i","pattern":"[url:value = 'http://122.241.88.111:37163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb3b9f8-7022-84ae-ec80-000028ce905a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://firstratezim.com/Updater.exe","pattern":"[url:value = 'https://firstratezim.com/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ef9d0e-fe86-4387-3539-00000ab26362","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/bin.sh","pattern":"[url:value = 'http://222.140.197.114:37580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94321eb4-a9b4-2097-3477-00002ab77da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325592.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c403346-8878-2b6a-03d9-000002d69050","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/bin.sh","pattern":"[url:value = 'http://42.224.81.6:39508/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe2bfad8-62aa-84fe-08a6-00003503d1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/i","pattern":"[url:value = 'http://222.140.197.114:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65df087-cd2b-b3de-d86e-0000116a8499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mipsel","pattern":"[url:value = 'http://31.58.171.194/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d60e3b-4366-a2a1-44c4-00002d7b1522","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mips","pattern":"[url:value = 'http://31.58.171.194/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889cdbb2-a374-d376-65ea-0000a9d9ace3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/bin.sh","pattern":"[url:value = 'http://42.238.169.48:54614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--056549fc-a5ca-a909-09ca-000054cbae84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/bin.sh","pattern":"[url:value = 'http://103.249.199.3:45299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92acc6-0f69-9870-90da-00007de7aeeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/i","pattern":"[url:value = 'http://42.224.81.6:39508/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586f5e2c-9b42-e508-d9ec-00003c14f661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/i","pattern":"[url:value = 'http://42.238.169.48:54614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac95b69d-0f21-b6a6-575e-000033470054","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/bin.sh","pattern":"[url:value = 'http://123.12.46.19:42170/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7e7c76f-f4e8-c6b9-1720-00000d28ff56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/bin.sh","pattern":"[url:value = 'http://101.108.7.49:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f05425a-ff32-a5f0-bf59-0000277837bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.59.126:36050/bin.sh","pattern":"[url:value = 'http://119.114.59.126:36050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691c192b-c03f-ecac-0411-00004f6f1991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/i","pattern":"[url:value = 'http://123.12.46.19:42170/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086743b1-e559-cc18-4331-0000386839bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/bin.sh","pattern":"[url:value = 'http://42.230.45.47:55198/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034aab2-0666-3bd5-739a-000047f0cf16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/i","pattern":"[url:value = 'http://101.108.7.49:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b032b6-ea92-1e69-445a-000013b42037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.233.205.151:33594/bin.sh","pattern":"[url:value = 'http://121.233.205.151:33594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e3ae0b8-d16e-efc3-46cf-0000a749c066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/i","pattern":"[url:value = 'http://42.230.45.47:55198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2307ea-6e70-e34e-a3d0-0000bd25f7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.35:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1ddea7-be63-3138-0db6-000054fc8a59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.233.205.151:33594/i","pattern":"[url:value = 'http://121.233.205.151:33594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a075ab-4e6c-9fe7-0ab0-0000a5c5d9dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm5","pattern":"[url:value = 'http://31.58.171.194/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3beae0-631c-3525-438a-0000480e67a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86_64","pattern":"[url:value = 'http://31.58.171.194/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1839b2-2159-4dae-f4de-00002f447a11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86","pattern":"[url:value = 'http://31.58.171.194/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feebd9f-7841-c8bc-e1e0-000014e0a596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/bbc","pattern":"[url:value = 'http://31.58.171.194/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ae1487-81fa-1f90-bd45-00000fcc1157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm7","pattern":"[url:value = 'http://31.58.171.194/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa7453d-8a24-2011-f567-00001d79beb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm4","pattern":"[url:value = 'http://31.58.171.194/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a92411-26ea-f2a4-c266-0000b7707632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm6","pattern":"[url:value = 'http://31.58.171.194/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbfb6f4-9ff1-f547-b90e-0000affa391c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_powerpc","pattern":"[url:value = 'http://31.58.171.194/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90a9a20-0b19-bd05-b2f2-0000a7408809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_aarch64","pattern":"[url:value = 'http://31.58.171.194/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd2612-9bca-47f9-c80b-00009dda7e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/bin.sh","pattern":"[url:value = 'http://123.172.77.129:45661/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12bc1103-87c9-3bd4-2a9f-0000673e2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/i","pattern":"[url:value = 'http://115.48.163.35:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee34d402-32d4-83c2-ea71-000033126580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/bin.sh","pattern":"[url:value = 'http://219.157.249.227:40515/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef636be-a649-03ce-382b-0000e67450e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/bin.sh","pattern":"[url:value = 'http://103.31.103.204:55940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21036bef-9408-e1fe-6708-000049c831c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/bin.sh","pattern":"[url:value = 'http://42.224.151.118:35018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d589c57c-ae28-5878-cf8a-00008b74ccc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/bin.sh","pattern":"[url:value = 'http://115.57.121.48:46211/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd0bc67-9237-2848-4570-0000774dabb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/i","pattern":"[url:value = 'http://103.249.199.3:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36dc9145-9952-bdde-3647-000065182f17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/i","pattern":"[url:value = 'http://103.31.103.204:55940/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049768bc-98f4-a7cb-0c56-0000fb7da596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/i","pattern":"[url:value = 'http://42.224.151.118:35018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06951339-0477-8cf9-8d1e-00003e46bdee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/i","pattern":"[url:value = 'http://115.57.121.48:46211/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701f26dc-8069-86cb-7a21-00003e33075b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:33484/i","pattern":"[url:value = 'http://83.219.1.198:33484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cfe93d-ed5a-aa9e-300e-00005ca2a428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/bin.sh","pattern":"[url:value = 'http://182.116.11.55:53485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19008a68-ad35-f92b-ab38-000073deafee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.186.126.198:55528/i","pattern":"[url:value = 'http://60.186.126.198:55528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d7d846-f1dd-7ed2-b3bf-0000d137bce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/gg11","pattern":"[url:value = 'http://191.44.114.243:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cddd5f9-733f-be14-0ad0-00004a4e925e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/bin.sh","pattern":"[url:value = 'http://222.141.132.237:60298/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fff88a9-ebd9-36ba-398b-0000fc87de00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/i","pattern":"[url:value = 'http://182.116.11.55:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04126e7a-f7ab-e810-fb58-0000a5d79f4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.145.210:44835/i","pattern":"[url:value = 'http://27.44.145.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fdc2c0-c35d-d6b7-2271-00005f19e8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.10.6:39981/i","pattern":"[url:value = 'http://115.48.10.6:39981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e13fd2-f501-67ec-b6e5-0000f5a85ca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/.bash_history","pattern":"[url:value = 'http://191.44.114.243:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33ffbc1-1d99-fb7b-e44c-00002535ac31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.165:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fd55a-9f17-f3b8-eb02-0000df74f295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/bin.sh","pattern":"[url:value = 'http://180.190.189.204:53404/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7ced69-b954-6d10-53ba-00000113054c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://connectmagazineads.com/CarbonCopyCloner7.dmg","pattern":"[url:value = 'https://connectmagazineads.com/CarbonCopyCloner7.dmg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8c5b39-df4a-dd5c-99af-0000628dd0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe","pattern":"[url:value = 'https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3432781-ea12-d786-ffe0-000021919695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/8089/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/8089/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87576957-b205-6421-565e-0000dcb569a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/sike/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/sike/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83716315-2fd3-7e8c-ad0e-000087495d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/35/eas/niceworking.vbe","pattern":"[url:value = 'https://217.154.188.255/35/eas/niceworking.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3361ce49-cfea-9bec-4ec6-0000e4f158dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe","pattern":"[url:value = 'https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001f91d0-4327-17f6-6327-00009cadc630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta","pattern":"[url:value = 'https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0fa07b-e46d-7761-7dad-0000926a63f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/p/cgnty_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/p/cgnty_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f1e226-bf7d-76dd-5397-00006e442cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/bin.sh","pattern":"[url:value = 'http://116.2.53.55:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a610df9-1323-0464-9122-0000c1782228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/r843.exe","pattern":"[url:value = 'https://62.60.226.185/r843.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f596f1d4-36cb-eddd-2355-00006a3d3e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta","pattern":"[url:value = 'https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd9daea-3772-231f-149b-0000d4db5730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/kaze.exe","pattern":"[url:value = 'https://62.60.226.185/kaze.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6643fac-8cf6-3d3a-39d4-000036156e61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta","pattern":"[url:value = 'https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188bfa63-3da5-7d47-43e0-00002ade6350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk","pattern":"[url:value = 'https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab3b005-72d7-d7c7-3477-00004410cbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'https://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598f8632-4ac2-9a1c-50b7-0000c347d575","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.95.62/ph/velogs.exe","pattern":"[url:value = 'https://172.245.95.62/ph/velogs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86039b7-f38c-e51c-e44e-000077514161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'https://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce5daa2-ba5c-e46b-d80e-0000853df77e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js","pattern":"[url:value = 'https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223f0d52-50c6-3a95-7859-00009886ec22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/63748/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/63748/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86deecee-b523-29c7-d80c-0000c4aafbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/29039/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/29039/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c960dd-a8e6-a95d-71f0-0000f662f2b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/09890/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/09890/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2870e0eb-a2f2-edae-197c-00005fbaf817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js","pattern":"[url:value = 'https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6303bf-239f-34d6-9472-0000c5e29f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/bin.sh","pattern":"[url:value = 'http://112.198.239.2:34176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3728c6-c0de-3757-3ad6-000084b4a437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/v/client_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/v/client_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278be35-d93b-ac68-7490-0000f24e187f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.195.219/ty/load.bat","pattern":"[url:value = 'https://217.60.195.219/ty/load.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--240c523a-deaf-74dd-9e2c-00005cb15631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.195.219/ty/s.bat","pattern":"[url:value = 'http://217.60.195.219/ty/s.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156c377e-5cf1-b08f-e3ed-00007e1a8da6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/spxploy.vbs","pattern":"[url:value = 'https://baoxissde.one/S/spxploy.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caff75d9-7ee2-6fe3-71a0-0000096429e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0e8e21-5051-a966-1dd6-00008f41f144","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tantralegacy.com/Client/battlebot.exe","pattern":"[url:value = 'https://tantralegacy.com/Client/battlebot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea065319-a967-eb21-2294-00009f747619","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/go_b3.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/go_b3.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99238564-8787-aed7-4b83-00005f3b3bb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://itsmystik.com/dl/deadlock/Loader.exe","pattern":"[url:value = 'https://itsmystik.com/dl/deadlock/Loader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2604653a-06c2-3879-397e-0000c26d7e35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi","pattern":"[url:value = 'https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278e7c4-c838-9d31-12eb-00002d31e785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://94.26.90.90/client.exe","pattern":"[url:value = 'https://94.26.90.90/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f8d30ef-dd8c-3866-3e7c-00001a871b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi","pattern":"[url:value = 'https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24937ac2-30c2-35de-2127-0000da8b5426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/sp.zip","pattern":"[url:value = 'https://baoxissde.one/S/sp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7fc2456-7fc7-0486-dc4c-0000d9a448ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://xxpro.dev/BAC_PC%E5%A3%B3.exe","pattern":"[url:value = 'https://xxpro.dev/BAC_PC%E5%A3%B3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ab77df-cce6-c64b-c31d-000053d9a2b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe","pattern":"[url:value = 'https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755a6932-1c76-1ecf-6186-0000ec181c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d226d631-c919-b10b-cf8c-0000d4b02dbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9895d4-7154-71eb-9a31-00008c14bd87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac501e0a-dac2-1a5f-05d9-000046cbaeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.97.56.196/Services.apk","pattern":"[url:value = 'http://38.97.56.196/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db7accd-af14-0bc5-bd4b-00003ab6952a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/Services.apk","pattern":"[url:value = 'http://176.65.139.139/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2bcc8a-98af-2017-22e1-0000d327ba24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c540b52d-85ec-4ef9-da31-00002b8d8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.221.93.40/Servicer.apk","pattern":"[url:value = 'http://37.221.93.40/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab17141-89e5-6561-ec20-00000f6c691e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a93d6-91bc-7b38-20af-0000b1177d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.196:8080/api/v1/install","pattern":"[url:value = 'http://94.154.43.196:8080/api/v1/install']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d3aa77-f635-e744-a4af-0000eefaec6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm4","pattern":"[url:value = 'http://69.33.213.199/nerv.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a2e171-4ae8-365b-d838-0000def847f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mips","pattern":"[url:value = 'http://69.33.213.199/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11875f2-6f59-6828-6c2a-00000312f724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_64","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd49ae1-a328-955d-da07-000056468b0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm5","pattern":"[url:value = 'http://69.33.213.199/nerv.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e5fc7c9-4969-361e-24cc-00001567e503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86","pattern":"[url:value = 'http://69.33.213.199/nerv.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75b4961-1fac-cf86-3d77-00006061984e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.dbg","pattern":"[url:value = 'http://69.33.213.199/nerv.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81dafbcd-3fec-1640-c16d-0000fc4f4380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm7","pattern":"[url:value = 'http://69.33.213.199/nerv.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df16362e-bf46-8323-9755-0000bb6d0abf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://ip-69-33-213-199.dfw.megapath.net/nerv.mips","pattern":"[url:value = 'http://ip-69-33-213-199.dfw.megapath.net/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bf1450-bcf3-ebdd-9ccb-0000edba1280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sh4","pattern":"[url:value = 'http://69.33.213.199/nerv.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07027b8-b8c8-e145-96ca-0000b5fb29bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mpsl","pattern":"[url:value = 'http://69.33.213.199/nerv.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450c2482-1f70-9a32-d9f9-0000ee992788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_32","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ddcb5b-be2e-30b1-ae4b-000044f324e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm6","pattern":"[url:value = 'http://69.33.213.199/nerv.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3edf607-041f-fc0f-1c3a-00006d648b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.ppc","pattern":"[url:value = 'http://69.33.213.199/nerv.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7d0f5d4-e36b-a4ed-b17f-000091ee1fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sparc","pattern":"[url:value = 'http://69.33.213.199/nerv.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198ed5a7-590e-b091-e409-0000de0e912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.m68k","pattern":"[url:value = 'http://69.33.213.199/nerv.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4cff81-3f2d-42f2-b351-0000f8cfc4ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/bin.sh","pattern":"[url:value = 'http://219.156.98.218:49065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63af33-69fa-9a97-c9dd-00002f7f8eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.90.106:37277/i","pattern":"[url:value = 'http://182.126.90.106:37277/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb517ae-bc89-6e60-d0f7-00009918f6be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/launch.vbs","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/launch.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2f61db-d8f6-b6c2-e361-0000a29df8db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/inject.ps1","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/inject.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8d0fe6-db9a-4f88-ba35-00004d880a74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/as.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/as.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d2acf0-cc0e-fdab-ad82-00002bdd76e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/wupd.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/wupd.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6d9864-518a-771c-fc19-000031333b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/ac.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/ac.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0467d5fd-c2a6-99b4-8526-000066f36088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/i","pattern":"[url:value = 'http://219.156.98.218:49065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2bdbb8-4bc4-3ed0-60cc-0000f14b0fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/i","pattern":"[url:value = 'http://182.121.250.165:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abeccef-f46a-9a2f-01ae-00001d5ed490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/bin.sh","pattern":"[url:value = 'http://115.48.12.174:50575/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee7dca5-616e-c44b-edf2-0000382627f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/i","pattern":"[url:value = 'http://180.190.189.204:53404/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d22c68-9e99-df35-34f3-0000e35e0734","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/bin.sh","pattern":"[url:value = 'http://27.215.52.217:41359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a134766e-dda4-6db2-71e2-0000eeee89e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/i","pattern":"[url:value = 'http://115.48.12.174:50575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5879db-c3b3-f01c-4cc3-0000eee784cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mips","pattern":"[url:value = 'http://94.154.43.210/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--039e9dac-4361-05df-e4e8-0000f74cabbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv6l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b3ce6f-6de6-6fde-04c2-0000b0ecd16d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv5l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a85aced-84b8-d456-7a4e-0000ca2c820d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv7l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b24a21d-c1d8-c552-3f9d-000040ba4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.x86_64","pattern":"[url:value = 'http://94.154.43.210/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a8ff2e-8849-2a7e-4518-00008d8cf8dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv4l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc5d1dd-dcdc-b0bc-49fd-0000020a2111","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/344f7e","pattern":"[url:value = 'http://5.182.210.174/344f7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d82af97-9a87-06e2-9193-00002603a9ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c515ee","pattern":"[url:value = 'http://5.182.210.174/c515ee']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2469196a-2f3f-c71c-8e6d-00001e587b98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/573976","pattern":"[url:value = 'http://5.182.210.174/573976']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c88fff19-5c17-cf4f-af20-000009a2be5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4844d","pattern":"[url:value = 'http://5.182.210.174/c4844d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23a6240-7b21-377f-bf18-0000152b183b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/094392","pattern":"[url:value = 'http://5.182.210.174/094392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96aeb304-7355-7add-ad80-00000df99e70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3679a","pattern":"[url:value = 'http://5.182.210.174/b3679a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fbabb7-020e-a356-d679-000053fbe30d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9dfbc4","pattern":"[url:value = 'http://5.182.210.174/9dfbc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c6088-a07e-3595-7321-00006aac384d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/49fa35","pattern":"[url:value = 'http://5.182.210.174/49fa35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd42245b-e144-e762-50a0-0000fda54558","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/065109","pattern":"[url:value = 'http://5.182.210.174/065109']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d4b0278-5056-d8b5-f652-00007dac86f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/473c1a","pattern":"[url:value = 'http://5.182.210.174/473c1a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db423d4-c9f0-d680-305d-00000c53d8cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acb326","pattern":"[url:value = 'http://5.182.210.174/acb326']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6c0b3d6-378e-ade8-b3e8-000029fe3301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69d5f2","pattern":"[url:value = 'http://5.182.210.174/69d5f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50df3ad8-dc7e-c5ac-3e74-00004429304a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/279fe0","pattern":"[url:value = 'http://5.182.210.174/279fe0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae6dde-0bb9-ac7f-fd0f-0000925cc61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/456417","pattern":"[url:value = 'http://5.182.210.174/456417']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--154e5548-2966-032e-f472-0000dc575c45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b08fb","pattern":"[url:value = 'http://5.182.210.174/2b08fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77f2049-f341-0500-8e85-0000de03bb09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0db2ec","pattern":"[url:value = 'http://5.182.210.174/0db2ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b07e229-be8b-0f5c-7a00-000031c63c77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/db7a9c","pattern":"[url:value = 'http://5.182.210.174/db7a9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804f7f65-d284-8b66-0703-0000f4ae75dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ac363","pattern":"[url:value = 'http://5.182.210.174/8ac363']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8192a18a-aea4-e29e-0804-0000b1c9a4b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/515c80","pattern":"[url:value = 'http://5.182.210.174/515c80']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c73821a-e97b-b859-fce0-0000257eb90b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0b1663","pattern":"[url:value = 'http://5.182.210.174/0b1663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60c8e5-5aee-35aa-fd4d-000015ce6b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c72382","pattern":"[url:value = 'http://5.182.210.174/c72382']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de7f014-0916-ba78-e6bf-0000c58bd809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/676064","pattern":"[url:value = 'http://5.182.210.174/676064']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c00d38c-b76f-5b12-6f4a-0000b64c31ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/78f157","pattern":"[url:value = 'http://5.182.210.174/78f157']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02b4ba52-dee2-5835-31d3-000049688ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/faedd6","pattern":"[url:value = 'http://5.182.210.174/faedd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5642b87a-1018-6a25-b8e7-000019deac72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mipsel","pattern":"[url:value = 'http://94.154.43.210/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d7aaea5-c484-acb5-86ce-0000ab91d33d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/55bd33","pattern":"[url:value = 'http://5.182.210.174/55bd33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6ce237-50d2-4af7-bed0-0000fd1e0a2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/804c43","pattern":"[url:value = 'http://5.182.210.174/804c43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5686c6f7-e8f5-bff4-4a3c-0000dd867670","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1498b2","pattern":"[url:value = 'http://5.182.210.174/1498b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec58b2b1-8a74-7bf2-98ec-000083a9c499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4d493d","pattern":"[url:value = 'http://5.182.210.174/4d493d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e3f803-89e7-5223-e339-0000135623c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/589a29","pattern":"[url:value = 'http://5.182.210.174/589a29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6219c764-ac06-f2f5-d148-00005b78cf79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b74d4d","pattern":"[url:value = 'http://5.182.210.174/b74d4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e887f83a-765a-991e-b4cc-000072335836","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de19ef","pattern":"[url:value = 'http://5.182.210.174/de19ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65ac785-7d74-2a8c-2435-00001c8d6560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a20da","pattern":"[url:value = 'http://5.182.210.174/6a20da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125ebaf7-d0c1-e9fe-1d92-0000d6041a28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e00ee7","pattern":"[url:value = 'http://5.182.210.174/e00ee7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cc4337-b9e1-59e6-17bd-00009cd424c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b39f8f","pattern":"[url:value = 'http://5.182.210.174/b39f8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c498c84e-2e7c-0d71-dbb7-00007385a390","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85692b","pattern":"[url:value = 'http://5.182.210.174/85692b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52bb3d-e9bf-a63a-27fb-00005a91744d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/76e6f5","pattern":"[url:value = 'http://5.182.210.174/76e6f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda7fb7f-7079-a5e0-bbb7-000014216423","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/i","pattern":"[url:value = 'http://27.215.52.217:41359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0461516-73a0-f9d5-7cef-000044d7982d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.182.131:41041/Mozi.m","pattern":"[url:value = 'http://115.57.182.131:41041/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b2a05-9f57-539d-90ed-0000316ab2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.63.8.194:46154/Mozi.m","pattern":"[url:value = 'http://183.63.8.194:46154/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6430928a-4911-4c36-fb05-00007d7a03a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.229.108:47843/Mozi.m","pattern":"[url:value = 'http://110.186.229.108:47843/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f92c51b-7517-0a75-79b6-00004c89d8d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/atomic/atomic.sh","pattern":"[url:value = 'http://77.239.124.108/atomic/atomic.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fc993e-2da8-d6e1-3bac-0000ce0b0291","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/bin.sh","pattern":"[url:value = 'http://183.23.132.41:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6616849-0571-e8b4-df2b-00001cac4336","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/i","pattern":"[url:value = 'http://61.53.220.201:34645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5f6a82-300b-321b-3c9b-000072014553","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://python3.en-us--balancing.co/jquery.min.js","pattern":"[url:value = 'https://python3.en-us--balancing.co/jquery.min.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0033c6-4e9a-1f9a-3841-0000953fca10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multisavcx.xyz/ncx","pattern":"[url:value = 'https://multisavcx.xyz/ncx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdbd96f-0f07-2e25-c0f3-0000f606bc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://elxxvvx.xyz/i","pattern":"[url:value = 'https://elxxvvx.xyz/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24a4109-1dfd-0f85-2fed-000084cca859","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a237d7-b44c-031b-61d9-0000d46f04d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63a825f-147b-3a16-9d9f-00005c2f0fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/bin.sh","pattern":"[url:value = 'http://119.117.76.11:59095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a7c925a-2f1a-db3a-4ce4-00008f993b6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/i","pattern":"[url:value = 'http://183.23.132.41:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12970091-f560-8e9b-6767-000066cc919c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/i","pattern":"[url:value = 'http://113.229.190.135:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c55215b-3899-296d-5010-00000301343b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.210:44835/i","pattern":"[url:value = 'http://120.84.212.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0892007e-e36a-5cef-9e5a-0000b418f294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/i","pattern":"[url:value = 'http://119.117.76.11:59095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3fec70-4a00-c657-3f77-0000e42abc8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.77.1.20:6021/linux","pattern":"[url:value = 'http://120.77.1.20:6021/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--829e0ca6-e1d7-e61e-6f2f-0000928195b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.203.4.64/client.exe","pattern":"[url:value = 'http://85.203.4.64/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03baadc-418e-bc5f-0f5b-00009506345d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b","pattern":"[url:value = 'http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd81d191-cb58-7a7d-e42d-00000a3bd03c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.213:53264/bin.sh","pattern":"[url:value = 'http://115.55.236.213:53264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2059e8-c87f-0f5b-c557-0000039002ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.95.17:59123/i","pattern":"[url:value = 'http://61.53.95.17:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac9f115-bfd3-dd25-687c-000001848e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/bin.sh","pattern":"[url:value = 'http://60.184.140.145:34890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc06874-60be-21f5-19c2-000091cea6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.253.208:46690/bin.sh","pattern":"[url:value = 'http://59.97.253.208:46690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--139b82da-4e37-da87-30f8-00001a00455e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9b3ce1-02cb-015e-e050-00004878cc46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/bin.sh","pattern":"[url:value = 'http://112.232.226.68:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e25fc2-4fcd-24fa-e547-0000157ac5a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/RUMPYU14TH.png","pattern":"[url:value = 'http://193.104.58.65/RUMPYU14TH.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c733ad0f-bf3b-2ca3-0f3d-00005b53a1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/rumpyu13th.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu13th.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7ab72d-8c9b-9ac4-4cdd-0000dfb730ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/img_gas.png","pattern":"[url:value = 'http://193.104.58.65/img_gas.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc689350-5967-7bc1-f606-000081cf5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/rumpyu18.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu18.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddaf2a8-0dcd-4169-4870-00006391f18e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.95.103.215/crypt/crypted.ps1","pattern":"[url:value = 'http://23.95.103.215/crypt/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19c1b87-925a-fc0c-b1b8-000040835cef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bda0899-0894-4a1b-7dd6-0000a86b7758","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg","pattern":"[url:value = 'https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538c1da3-38c9-f0db-170d-0000342a05d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/bin.sh","pattern":"[url:value = 'http://58.47.104.43:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a07c4ee-52da-763c-b67c-000066f83f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.61.0:41221/bin.sh","pattern":"[url:value = 'http://219.155.61.0:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b9833c-7d3f-7738-2dcb-00007b14997d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sivrex.click/obi/Obi-64Bit-remcos_a.bin","pattern":"[url:value = 'https://sivrex.click/obi/Obi-64Bit-remcos_a.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbe862b-d47b-e48b-09c8-0000816e4da2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2af571d-80c6-3d56-28a1-0000531b00b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2813545b-faed-0bf2-1fbd-0000cef65d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png","pattern":"[url:value = 'https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b3a7a8-d663-dfbf-db48-0000903381c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sixmexicos.com/20/stego_cm94aawwlf.png","pattern":"[url:value = 'https://sixmexicos.com/20/stego_cm94aawwlf.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa4e3a6-f846-843d-3e81-00008d6ba338","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nieuw.technoberg.nl//wp-content/bin44.exe","pattern":"[url:value = 'https://nieuw.technoberg.nl//wp-content/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b4889-2889-9f7d-dab4-0000de8b28b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/niceorgimg_082205.png","pattern":"[url:value = 'https://sunix-technology.com/images/niceorgimg_082205.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076dc90f-241c-cc3e-5105-0000d6117376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/bin.sh","pattern":"[url:value = 'http://123.9.240.151:46316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47c02a-fef0-6bbb-2bd6-0000e2ee854e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/i","pattern":"[url:value = 'http://58.47.104.43:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--accd4ba2-7e9d-fb2e-b2e2-0000d8d2e4cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html","pattern":"[url:value = 'https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b544a7a7-9fdd-e3f1-433d-0000b8b6a159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso","pattern":"[url:value = 'https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--105a0019-5826-57f4-adbd-00006c3f65ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.246:33661/i","pattern":"[url:value = 'http://182.121.153.246:33661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470040ac-58de-8f0d-8247-0000d46daee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/i","pattern":"[url:value = 'http://123.9.240.151:46316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce44296-ef47-0f6d-73a0-000068c08ac6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/i","pattern":"[url:value = 'http://182.119.6.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0a1843-dca6-4628-cadc-0000e464073e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/bin.sh","pattern":"[url:value = 'http://42.228.233.155:37974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c61b686-e528-2923-3b1d-000099e47ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/i","pattern":"[url:value = 'http://42.228.233.155:37974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be660a3f-3665-85cd-c52a-0000857fcb5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://files.catbox.moe/knujwn.png","pattern":"[url:value = 'https://files.catbox.moe/knujwn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01f6457-ba76-90db-3389-0000111cde7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/bin.sh","pattern":"[url:value = 'http://61.52.159.178:51500/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27eebf33-2e54-94a5-705c-0000f6b46348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb0b3fa-197d-75eb-9e75-000048acfda0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cea42e5-7ade-cc9f-4836-0000d9cf7148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.231.174:57989/i","pattern":"[url:value = 'http://79.106.231.174:57989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3069985f-cd2f-1b89-cb70-00001e60f5fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/bin.sh","pattern":"[url:value = 'http://182.119.6.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad7c800-ca4b-20d0-5a9f-0000efe25fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/bin.sh","pattern":"[url:value = 'http://120.84.215.27:44835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca557bcb-83cf-81db-d1e7-0000be463983","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.137.246.220:9705/linux","pattern":"[url:value = 'http://85.137.246.220:9705/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da66f71c-0a23-07be-6122-00001e66ac77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.40.213.105:9384/linux","pattern":"[url:value = 'http://121.40.213.105:9384/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d97196-845a-615d-bd31-0000c4c3a348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.108.130:33716/i","pattern":"[url:value = 'http://119.117.108.130:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d07c51-757e-4ee7-a942-00009c51e52f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.229.127.206:53013/i","pattern":"[url:value = 'http://211.229.127.206:53013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86b299d-43d7-227e-0a27-00009f9b49de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/i","pattern":"[url:value = 'http://61.52.159.178:51500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a567aeb3-8dab-9cef-34a1-0000d03c60de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.5.87.54:4370/i","pattern":"[url:value = 'http://36.5.87.54:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3483c000-cbf3-55f9-8095-00004b3d404e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/bin.sh","pattern":"[url:value = 'http://222.138.103.241:51367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278f8543-df44-be2e-641d-0000bd5984af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/bin.sh","pattern":"[url:value = 'http://182.117.51.201:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0accfd3-17f3-6e5d-9411-0000e8bbea65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.49.31:47819/i","pattern":"[url:value = 'http://182.114.49.31:47819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993203fe-f4f4-7cea-a81c-0000a8d619ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.247.247:43842/i","pattern":"[url:value = 'http://182.121.247.247:43842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68984925-87cb-e60f-3fc0-0000159f2ef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/i","pattern":"[url:value = 'http://182.117.51.201:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dbf78f-9065-2b46-3419-000054e365b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/bin.sh","pattern":"[url:value = 'http://42.178.23.194:35659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d12bad-0851-ffe2-e5df-0000a2729471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/i","pattern":"[url:value = 'http://61.137.206.166:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9dd9c08-8141-775b-fd17-0000dff37fb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/i","pattern":"[url:value = 'http://42.178.23.194:35659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b02ff-957d-9817-f6bc-0000bf0fbbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/bin.sh","pattern":"[url:value = 'http://60.217.123.198:46902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84686b51-aa44-691d-9e1a-00005c685aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/i","pattern":"[url:value = 'http://85.108.86.149:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1498cf99-00b5-5717-5344-0000b4021632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/bin.sh","pattern":"[url:value = 'http://123.14.178.128:40955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928878f5-f4fe-0bd8-2c5a-000043fc0ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/i","pattern":"[url:value = 'http://123.14.178.128:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e98ed1f-432d-94e6-69b1-0000f608372a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/bin.sh","pattern":"[url:value = 'http://61.53.84.173:60970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d97589-dfce-e866-19f3-0000b7d582c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.41.147:38217/i","pattern":"[url:value = 'http://125.43.41.147:38217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc85ef4-7441-baea-d867-0000f73ca457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.0:38525/i","pattern":"[url:value = 'http://163.142.93.0:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0997e9a2-f983-eb0e-9015-0000cf5d82eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/i","pattern":"[url:value = 'http://61.53.84.173:60970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073aa809-e951-09cd-8e83-00005b759175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.132.198.200/payload_v10.sh","pattern":"[url:value = 'http://178.132.198.200/payload_v10.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1eabfa-4b74-0026-e221-0000fbd9eb77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/MSI_PRO.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbcf7aea-fc5c-03ee-003e-00008e085e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/tu3929.exe","pattern":"[url:value = 'https://62.60.226.185/tu3929.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87c7569f-90ac-e3a8-5e4a-0000ebd81725","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8","pattern":"[url:value = 'https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e0b851-8567-cdf4-e43e-0000151ec715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0993a88f-7e29-3ca0-98d4-000011c7ed05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc1.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118e4066-0370-4895-84a2-00004255130f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e1e8d0-b840-5bc1-38e7-00003855db43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a1598f-9e89-e6bb-101e-0000d4b76c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/","pattern":"[url:value = 'https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1e5d72-c12f-b5cb-e6f5-00005619e7d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/","pattern":"[url:value = 'https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a8d519-9e6b-d519-6769-0000c3c3c7c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://107.174.251.112/img/3.jpg","pattern":"[url:value = 'http://107.174.251.112/img/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117c1a04-22b0-b444-3569-00001ae12aaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vibecoders.vip/softwaretech","pattern":"[url:value = 'http://vibecoders.vip/softwaretech']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5c1b51-435c-3da7-70ef-000052e3d706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1","pattern":"[url:value = 'https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd56784-ab0e-de66-c2fc-0000ce4f2d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/stego_2pu3tp48pp.png","pattern":"[url:value = 'https://somostask.co/stego_2pu3tp48pp.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d779a-3437-1890-b992-0000578f8a9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/bin.sh","pattern":"[url:value = 'http://61.53.220.201:34645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fe319c-76ce-bb4d-2055-00009c27dc84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/bin.sh","pattern":"[url:value = 'http://119.183.51.162:34711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e2561e-97b2-fe35-0924-0000402bb275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/bin.sh","pattern":"[url:value = 'http://27.220.84.239:55052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c392672-5a4d-94d7-1484-00003fd8f290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=","pattern":"[url:value = 'https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8dcaef-aae4-ea24-b210-0000f4d412b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/bin.sh","pattern":"[url:value = 'http://42.5.10.102:53641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8f79b9-dfe6-0962-73da-0000bd03dc63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.zenledgerpolicy.com","pattern":"[url:value = 'https://www.zenledgerpolicy.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--912be624-f82f-cf41-f727-00006faa0629","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582eca8c-58be-584d-fece-0000f19a9519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://docuslutmentadoonline.top/reference/","pattern":"[url:value = 'https://docuslutmentadoonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e367df-0881-51df-672c-0000611c79e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://robinhoodwallet.dervano.vu/windows/","pattern":"[url:value = 'https://robinhoodwallet.dervano.vu/windows/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f62236a-b1ce-8173-ad80-0000ac237c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://swanrecovery.com","pattern":"[url:value = 'https://swanrecovery.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca89969f-fbb8-0a39-1421-0000b146acb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://helnivo.vu/FinalCD","pattern":"[url:value = 'https://helnivo.vu/FinalCD']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c92c4e3-0cc1-ae03-0a02-0000ee45cbf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://docuuumennnntonline.top/reference/","pattern":"[url:value = 'http://docuuumennnntonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495edd5-ee56-fb58-7a61-0000148158ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azlvaka.vu/access","pattern":"[url:value = 'https://azlvaka.vu/access']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44e5bb27-a204-1744-4b73-00001e25740b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f0557-7045-9a0f-8fe5-00001b26c5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/i","pattern":"[url:value = 'http://27.220.84.239:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6684ddb7-adfb-c2b4-4169-0000ea245136","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ad61ec","pattern":"[url:value = 'http://5.182.210.174/ad61ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999e2779-a734-cb5d-cf59-000062241ace","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4a84f","pattern":"[url:value = 'http://5.182.210.174/c4a84f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee00321-f884-a3b7-83b5-000046ded88c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eafe3","pattern":"[url:value = 'http://5.182.210.174/3eafe3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f479af-c8b4-2885-5a90-0000627fab31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fc2db6","pattern":"[url:value = 'http://5.182.210.174/fc2db6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4485a36-a15b-565d-5dc2-0000ecc3a014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9685","pattern":"[url:value = 'http://5.182.210.174/9c9685']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ba805-dc5e-c88e-72e1-000038df487d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a40ae","pattern":"[url:value = 'http://5.182.210.174/6a40ae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91139d9c-7ec2-7fd2-c86c-0000402eb122","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3eb09","pattern":"[url:value = 'http://5.182.210.174/b3eb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c06043-d046-4cce-70d8-00007833df10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/026141","pattern":"[url:value = 'http://5.182.210.174/026141']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfa5ab1-6cd6-ac2a-14ab-00002dd67ff8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/939936","pattern":"[url:value = 'http://5.182.210.174/939936']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e278cd-a7c7-71a0-da36-0000c4e330b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f287aa","pattern":"[url:value = 'http://5.182.210.174/f287aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031fa63d-02b5-b582-b1bb-0000ad9025f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b97872","pattern":"[url:value = 'http://5.182.210.174/b97872']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9326b6-05ef-279b-792d-00009f7d86cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a3160","pattern":"[url:value = 'http://5.182.210.174/9a3160']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c35337-7114-eb63-42ca-000046a92b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh","pattern":"[url:value = 'https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab661674-3dc2-f367-0eff-00001fc7f433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/bin.sh","pattern":"[url:value = 'http://182.126.248.10:58244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e96bc9-73f4-4803-3ec7-000035d700b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/bin.sh","pattern":"[url:value = 'http://85.108.86.149:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e75554-3344-82bb-530b-000066611d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1420190-346c-35b6-15b4-000088acec62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/bins/parm64","pattern":"[url:value = 'http://31.77.227.121/bins/parm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e48ce00-8fd3-5584-6c15-0000d9087642","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/i","pattern":"[url:value = 'http://42.5.10.102:53641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19510ad-a370-c6cc-6716-0000ef71fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.141:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.141:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72080ddc-127d-9965-e768-0000cb907ff7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.44.60:34879/i","pattern":"[url:value = 'http://182.113.44.60:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006402b5-e879-0099-4f32-00004f0abe96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/i","pattern":"[url:value = 'http://182.126.248.10:58244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcf0717-3f80-6dfd-2bca-0000a985b972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.147.247:47891/i","pattern":"[url:value = 'http://115.56.147.247:47891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f082bf-41f6-b987-c48d-00008e7cf4c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.150.195.235/newpath.sh","pattern":"[url:value = 'http://45.150.195.235/newpath.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9104d0b-6a54-7dce-b624-0000a0438b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/bin.sh","pattern":"[url:value = 'http://175.168.114.203:46828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42731c28-eae5-1af2-417d-0000ed532f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/i","pattern":"[url:value = 'http://175.168.114.203:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcd4b9c-f8cd-f04d-d2bf-0000f6272c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://flooriscoveringworld.com/bin.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09a891f-b007-e424-d50b-00001997f87b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/i","pattern":"[url:value = 'http://115.62.135.216:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c16-ee93-6a56-e69a-0000e4f4a37d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://wylkpznq.xyz/hukl/cp/bin.exe","pattern":"[url:value = 'https://wylkpznq.xyz/hukl/cp/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e33e1b-f9f9-8889-53e4-00009cc3a133","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/Candy.png","pattern":"[url:value = 'https://somostask.co/Candy.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c942cbd-146c-c993-2921-0000f7a31452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png","pattern":"[url:value = 'https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87daa203-33c8-f61f-8ca6-00000c071ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png","pattern":"[url:value = 'https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83bcfa5e-50db-f087-0136-0000bed0b007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/646d52","pattern":"[url:value = 'http://5.182.210.174/646d52']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c9e5160-c709-5b73-54fe-000008b65ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e27047","pattern":"[url:value = 'http://5.182.210.174/e27047']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0003f4-fc68-b381-89c9-00006d96cd5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6a806","pattern":"[url:value = 'http://5.182.210.174/e6a806']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a354c1a0-0b15-9acd-a6c0-000093e96b8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/908e60","pattern":"[url:value = 'http://5.182.210.174/908e60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f2188-1c80-988d-7c63-00003c1e272b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/833d99","pattern":"[url:value = 'http://5.182.210.174/833d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d14cb64-dbcf-2378-830f-0000897cfc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f61d73","pattern":"[url:value = 'http://5.182.210.174/f61d73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f253aca-f951-f024-3895-000006e35c29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6711b4","pattern":"[url:value = 'http://5.182.210.174/6711b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad264fa5-dcfe-fb9b-a5b8-00008e290cbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/229db9","pattern":"[url:value = 'http://5.182.210.174/229db9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a94d0a6-0f08-0e22-10b0-00005fd9f614","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/59e4b9","pattern":"[url:value = 'http://5.182.210.174/59e4b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5a0c31-1601-f999-3da5-0000f6d43d35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1e596c","pattern":"[url:value = 'http://5.182.210.174/1e596c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19012bb1-e87d-d9a0-0234-0000319d1c6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/63d2dd","pattern":"[url:value = 'http://5.182.210.174/63d2dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae44a27d-d51e-0c65-b9f2-000045dfe5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a9eeb4","pattern":"[url:value = 'http://5.182.210.174/a9eeb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a7e37a-df70-3b0f-e443-000090f13e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/i","pattern":"[url:value = 'http://115.58.177.63:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048fc7b4-fe49-e683-c27f-0000cf9dcc5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c97dc31a-08a2-5c2a-0c83-00002ba4eacd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ad42ea-338d-a2f8-3625-00003a2be24c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee8f5a94-5f5b-ff9e-f103-0000333f7e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/pr2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/pr2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c6b1d0-ce30-0d6a-776f-0000f62688a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/prcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/prcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c969e9-4b2b-2ee1-fe92-000004c204ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/img_122332.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/img_122332.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9cc55c-1ab6-593b-8247-0000dee46ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/bin.sh","pattern":"[url:value = 'http://182.112.89.53:48165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ee0b5f-7402-9b81-5506-000037d03a94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/i","pattern":"[url:value = 'http://182.130.209.58:35031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe626ff-1bde-78c3-377d-0000c059b585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/bin.sh","pattern":"[url:value = 'http://222.137.105.216:51325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138feb62-d485-4211-41c2-00007fa8ee65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/i","pattern":"[url:value = 'http://182.112.89.53:48165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ba1677-9c0f-56af-194f-000092e4d40c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a862e32-5f1e-159d-d441-0000dc455b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/eecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/eecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--544176f6-9281-aad0-853b-00003d81e5ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kits.frog.tw/Images/stego_jxdqj7fw9j.png","pattern":"[url:value = 'https://kits.frog.tw/Images/stego_jxdqj7fw9j.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79234fc4-49a8-dab1-9bdc-0000b75659f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/clc.zip","pattern":"[url:value = 'https://gaiadeqi.com/clc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15368973-3ddb-caf3-2e31-0000873a2529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/i","pattern":"[url:value = 'http://222.137.105.216:51325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4588abe6-094f-809a-fb52-0000f78987c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/bin.sh","pattern":"[url:value = 'http://116.2.50.30:54263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9dd3435-6099-1ecd-bb42-0000959e3fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/bin.sh","pattern":"[url:value = 'http://115.50.254.53:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73265546-8459-ff27-559b-000095a09843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/i","pattern":"[url:value = 'http://42.225.241.153:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678947cd-3937-da67-9de5-0000465da29c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/i","pattern":"[url:value = 'http://116.2.50.30:54263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71daca9-f062-b3fc-4727-0000436bbc9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/i","pattern":"[url:value = 'http://115.50.254.53:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81e6727-9105-1cbf-3cc6-000019c7d570","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/bin.sh","pattern":"[url:value = 'http://42.7.217.91:35797/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a286c2-2a47-bfb2-092e-0000335cfa9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/bin.sh","pattern":"[url:value = 'http://162.255.251.91:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0929ed-f05f-747d-692b-000068d621cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/bin.sh","pattern":"[url:value = 'http://115.62.135.216:60668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca05231-9bef-616d-aa26-00008f84565b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.81:51284/i","pattern":"[url:value = 'http://163.142.93.81:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640ab228-7bd1-e690-ef5b-0000f40e77b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/bin.sh","pattern":"[url:value = 'http://14.107.121.45:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85247879-fa54-4cbe-9c97-000074b301db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/bin.sh","pattern":"[url:value = 'http://42.225.241.153:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddf0a8d-b2e3-4063-b763-0000f118ea9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/i","pattern":"[url:value = 'http://162.255.251.91:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b99a412-75c2-b4a4-52b8-0000a86c6036","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/i","pattern":"[url:value = 'http://14.107.121.45:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6fe0d0-4136-22fe-8e22-0000fa8cffb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/i","pattern":"[url:value = 'http://113.236.118.216:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688a4f9a-98fb-3f2a-1775-00007e7e4114","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.56.136.70:46446/i","pattern":"[url:value = 'http://42.56.136.70:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f08b43-fe48-86e1-8c1d-0000e360c58f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.4.93:56227/i","pattern":"[url:value = 'http://115.51.4.93:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c42c53-4778-7c62-6c74-00003fb4b8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:57585/i","pattern":"[url:value = 'http://41.201.226.25:57585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228b9cac-ab66-49c7-577f-0000838a7e36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.216.59:45025/i","pattern":"[url:value = 'http://27.207.216.59:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2720583-2648-7c9c-8d6a-0000d47904f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.113:60057/bin.sh","pattern":"[url:value = 'http://59.96.139.113:60057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fca4e-0cc4-1ad6-ff9d-000044b3968d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/i","pattern":"[url:value = 'http://112.248.174.58:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d92283-7dde-15e5-9e32-00004fb8cc2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/bin.sh","pattern":"[url:value = 'http://42.230.209.22:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ca3871-7064-0f5a-450c-0000cd6bd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/i","pattern":"[url:value = 'http://42.230.209.22:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d686da-8b1f-dd8f-518c-00007601bd66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/bin.sh","pattern":"[url:value = 'http://115.57.212.220:54561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b6a766-ea97-c4b4-1c85-00007b68ce8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://140.237.7.157:41787/i","pattern":"[url:value = 'http://140.237.7.157:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f7cb20-894f-a6ce-c29e-0000c7ec6a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/i","pattern":"[url:value = 'http://115.57.212.220:54561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd3e08f-7077-b3ac-1e23-00005fbb69fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.13.196:55125/bin.sh","pattern":"[url:value = 'http://182.120.13.196:55125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f19e4-2a00-0625-29f2-00005122893b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.235:41753/i","pattern":"[url:value = 'http://46.236.65.235:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b0e494-ca21-9316-967a-0000ff1fd016","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/bin.sh","pattern":"[url:value = 'http://123.9.195.116:34313/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fa32c0-773c-eb8b-e111-0000d5c19cd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb1a9b0-83fa-c876-824f-0000f28b3fa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/bin.sh","pattern":"[url:value = 'http://61.54.253.22:60163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74abb301-9e90-e678-2d68-00007b58a8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/bin.sh","pattern":"[url:value = 'http://182.121.43.33:42422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceb20f8-01da-7290-c20c-0000edfd7898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.177.12:56227/i","pattern":"[url:value = 'http://123.12.177.12:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9014ab2-6109-d384-a041-00004f3df870","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/bin.sh","pattern":"[url:value = 'http://123.190.17.0:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f867940-ced8-383d-36c6-00007eca2cdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/i","pattern":"[url:value = 'http://123.9.195.116:34313/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5ff39f0-f1ca-2a0d-344a-0000623454fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/i","pattern":"[url:value = 'http://182.121.43.33:42422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fae832c-c2a8-7f6d-0b1c-0000e4e1bf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/i","pattern":"[url:value = 'http://61.54.253.22:60163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e951b9c-07ec-f717-b112-0000292ca825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/bin.sh","pattern":"[url:value = 'http://182.123.162.14:46510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e3e9aa-5010-f936-7e8e-000096266647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.118.232:57819/bin.sh","pattern":"[url:value = 'http://115.61.118.232:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66ebaa8-022c-329e-978e-0000973d43ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/bin.sh","pattern":"[url:value = 'http://115.55.52.24:36106/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336155c8-bcbb-5835-61cf-000096b37aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/bin.sh","pattern":"[url:value = 'http://123.9.223.160:52129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf511864-8631-7e0f-660f-000025dfdfa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/i","pattern":"[url:value = 'http://182.123.162.14:46510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a164071-c847-5432-1afe-0000a5e8bda7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/bin.sh","pattern":"[url:value = 'http://61.53.120.157:38424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8882e6a7-592d-728c-662e-000023d3b8a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/i","pattern":"[url:value = 'http://115.55.52.24:36106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d63c89f-61c5-c19c-0b39-0000d5a1d74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/bin.sh","pattern":"[url:value = 'http://119.114.63.205:38557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b156d33-f148-a947-b46c-00006fd5effd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/bin.sh","pattern":"[url:value = 'http://223.151.74.149:48587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c00f8e-2091-1355-2e00-00000321ad5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/bin.sh","pattern":"[url:value = 'http://42.231.203.243:47565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8266700f-57fb-341c-ed8a-000074c4bf8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/i","pattern":"[url:value = 'http://61.53.120.157:38424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e57ead-e2ed-c269-eb04-0000440ac925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/bin.sh","pattern":"[url:value = 'http://112.248.174.58:54368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08b3a85-7356-0420-18b5-00004c4b18b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/i","pattern":"[url:value = 'http://123.9.223.160:52129/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14de4f6-89fd-91d0-2fca-0000774041b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/i","pattern":"[url:value = 'http://119.114.63.205:38557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f70b09-a77d-5a3b-dce7-00003b8ac097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/i","pattern":"[url:value = 'http://42.231.203.243:47565/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f1bf748-2a25-b11e-b405-00005b67271f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/i","pattern":"[url:value = 'http://125.46.213.70:33401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427ab81-dd8b-2d7b-fe9d-0000fc78e424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.102.151:51009/i","pattern":"[url:value = 'http://175.174.102.151:51009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ace10a8-6913-bbe4-c33c-00001503b48a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.197.57:46174/i","pattern":"[url:value = 'http://175.165.197.57:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--896a7bf2-5cfa-f6a7-17a4-0000239acae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/bin.sh","pattern":"[url:value = 'http://42.224.103.64:50547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3951249f-2d10-4c41-8297-0000efbd3a9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/i","pattern":"[url:value = 'http://42.224.103.64:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba3b094-379e-4226-0a18-0000a57609d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/bin.sh","pattern":"[url:value = 'http://42.5.254.164:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f619a74-019e-8801-2012-00001695b663","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.27:46218/i","pattern":"[url:value = 'http://125.44.18.27:46218/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f166d4-5a6f-f3f7-12ae-000087ebd641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm7","pattern":"[url:value = 'http://124.163.212.119:800/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d3f1bc-091a-fb5d-ebeb-00002a4f11d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm","pattern":"[url:value = 'http://124.163.212.119:800/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e6bdcbb-9ffa-d5bc-bcbb-0000ca9066e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arc","pattern":"[url:value = 'http://124.163.212.119:800/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff65642-3cd7-5fab-b5e7-00003f57b124","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm6","pattern":"[url:value = 'http://124.163.212.119:800/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c897c68-be0a-e1d5-8ffc-0000a55cd234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mips","pattern":"[url:value = 'http://124.163.212.119:800/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1df2a0-0b90-403a-1197-00006882f782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i686","pattern":"[url:value = 'http://124.163.212.119:800/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95bbaa1-0e0c-cd51-1252-0000ce5fbc7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mpsl","pattern":"[url:value = 'http://124.163.212.119:800/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b9777e-08bd-daa3-1ef0-000078dae4bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/ppc","pattern":"[url:value = 'http://124.163.212.119:800/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ffc927-4c11-17be-5494-0000fe4e9612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/spc","pattern":"[url:value = 'http://124.163.212.119:800/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ff07f8-75ac-a033-e127-00002de21eca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm5","pattern":"[url:value = 'http://124.163.212.119:800/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a61a38-9b79-0ce6-7e44-000051960d44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86_64","pattern":"[url:value = 'http://124.163.212.119:800/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a548be-19f9-30cc-76dd-0000a5aa04ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/m68k","pattern":"[url:value = 'http://124.163.212.119:800/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a99926ce-b94f-b0ff-4c43-0000254a5689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i486","pattern":"[url:value = 'http://124.163.212.119:800/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0b46b0-fa5f-8af3-62d8-000000d98ac9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86","pattern":"[url:value = 'http://124.163.212.119:800/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ffbb50-e6dc-b61a-a1fc-0000b2f9f303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/bin.sh","pattern":"[url:value = 'http://115.62.154.212:42250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acabaf44-0c89-b960-9ff2-0000eb7eba58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/bin.sh","pattern":"[url:value = 'http://175.107.210.253:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f673d1ab-f267-09d9-bec5-000070742301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.161.106:41462/bin.sh","pattern":"[url:value = 'http://27.217.161.106:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99115be5-9b0f-c3f8-a5a9-000068a0f311","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/bin.sh","pattern":"[url:value = 'http://93.113.166.57:59924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53a294-3e57-c99b-b269-0000603f8b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/i","pattern":"[url:value = 'http://115.62.154.212:42250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f7778a1-c5a0-2e1e-2b1b-0000054b65f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/bin.sh","pattern":"[url:value = 'http://115.56.100.50:44024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24682dc4-b928-c95b-d18d-00000193c893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/i","pattern":"[url:value = 'http://115.56.100.50:44024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--add5cca7-5067-9bcb-9872-0000b9b7b0ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/bin.sh","pattern":"[url:value = 'http://125.40.3.106:49988/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d70ea09-d394-4eda-2b5b-00000f331476","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/lilin.sh","pattern":"[url:value = 'http://124.163.212.119:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95942b6e-fa03-fe40-85db-0000372d0925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/i","pattern":"[url:value = 'http://123.8.162.45:59164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2c9d5e-dbb1-613e-491d-00006463de3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/i","pattern":"[url:value = 'http://93.113.166.57:59924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2bd328-df70-7496-0ca4-0000c4813d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/bin.sh","pattern":"[url:value = 'http://182.127.84.138:35880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36a3a7d-1e5b-3a17-dcaf-00002091e851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/i","pattern":"[url:value = 'http://125.40.3.106:49988/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b18caa8-936a-923f-9f21-00000164eeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.97.100.192:59504/i","pattern":"[url:value = 'http://210.97.100.192:59504/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c51c6aaa-dd90-51ef-46a4-0000ab8a42bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/i","pattern":"[url:value = 'http://182.127.84.138:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db19f5-f92a-287c-d2ed-0000cd785606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.108.130:33716/bin.sh","pattern":"[url:value = 'http://119.117.108.130:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4105f5de-d1c4-723a-b335-00006ac0bca2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/i","pattern":"[url:value = 'http://60.162.38.51:34372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63d6675-5769-512f-c261-0000cd836f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/i","pattern":"[url:value = 'http://182.116.20.246:39870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b9d10b-8f97-54bc-0d19-0000d2bd557e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.201.235:59633/i","pattern":"[url:value = 'http://42.225.201.235:59633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda9eeab-ed9d-ebaa-3022-00004eac32bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.25.157.124:39654/bin.sh","pattern":"[url:value = 'http://78.25.157.124:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4c071d2-2b3c-b8e5-4afd-0000d73b2e53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/bin.sh","pattern":"[url:value = 'http://105.186.163.117:50795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--617653f6-9791-00db-0125-00006dcf9033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/i","pattern":"[url:value = 'http://105.186.163.117:50795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb19e7d-74c6-8174-6c7e-0000fbfb9aee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/i","pattern":"[url:value = 'http://124.234.219.153:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e95ff55b-2354-8aba-7db1-00000680dd8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/bin.sh","pattern":"[url:value = 'http://27.215.123.78:39336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b446d77a-cb51-3d2d-418f-0000fcd61fe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/bin.sh","pattern":"[url:value = 'http://175.151.74.60:46830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734d5ee-6cbb-ed9e-6ff7-00008af17dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/i","pattern":"[url:value = 'http://27.215.123.78:39336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc5fcad-b8c4-5141-160a-000076d1135f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d085433-d678-6654-71ad-000002570e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/i","pattern":"[url:value = 'http://175.151.74.60:46830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931b17a-bf4b-1a9c-30f5-0000011037f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/weds/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/weds/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00bf21cf-c877-269c-c179-0000b9c42f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/image/stego_3d5qe0layt.png","pattern":"[url:value = 'https://coconutoficial.com.br/image/stego_3d5qe0layt.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d215717-922c-f2c7-d00e-0000548c2bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/AdobePDF.bat","pattern":"[url:value = 'https://brightwatch.mypi.co/AdobePDF.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c125752e-672d-e62f-8f84-0000dfe97771","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/Adobeinstaller.msi","pattern":"[url:value = 'https://brightwatch.mypi.co/Adobeinstaller.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34c325c-e1d4-ed87-7ba5-000003cacb03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/i","pattern":"[url:value = 'http://42.177.182.116:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ea7aae-9b57-0a68-66bf-0000b29faf48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/bin.sh","pattern":"[url:value = 'http://39.78.182.86:43103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fa4351-20a3-2599-d869-00001f3406f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://159.255.31.48:59678/bin.sh","pattern":"[url:value = 'http://159.255.31.48:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f2fb03-ab54-545f-9c7c-000052cb5098","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.219.218:37565/bin.sh","pattern":"[url:value = 'http://120.28.219.218:37565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e72aac5-9a3c-0171-2071-000089f155e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/bin.sh","pattern":"[url:value = 'http://175.44.156.36:37033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c40838-78c5-f1f9-d303-00008ade7d57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e4aed8-6cab-aae3-b00c-0000e00f9600","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://github.com/Orukemer/image/releases/download/Image/3.jpg","pattern":"[url:value = 'https://github.com/Orukemer/image/releases/download/Image/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e136c090-2ed8-e888-5283-00000d25bf68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ca56c8-0f85-4c32-31a9-0000fc9a53cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.225.135.160/downloads/3.jpg","pattern":"[url:value = 'http://45.225.135.160/downloads/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2835b36-1f8d-2caf-1761-0000f96e8a5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39d453e-3dff-b9f9-b637-0000d933d93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed0403a-770e-7fa5-8a7d-0000ab20b8d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc6b925-062f-49f4-15a9-00008df0b3aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835e4546-a10c-0735-b1dc-000081bc73ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.109.75.161:8080/lin1948WEx","pattern":"[url:value = 'http://86.109.75.161:8080/lin1948WEx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04fac299-e279-bf88-4963-0000a210681b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.98.99:33747/Mozi.a","pattern":"[url:value = 'http://112.123.98.99:33747/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df068758-3d87-9406-b3ec-00000b7891c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/bin.sh","pattern":"[url:value = 'http://210.208.111.36:53831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c14faa1-9775-6639-3eeb-0000d845afaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/i","pattern":"[url:value = 'http://196.188.75.58:44319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29b7ccf-1889-435e-f79b-00008ad2e837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/i","pattern":"[url:value = 'http://175.44.156.36:37033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c82576-7350-5c74-8c87-0000d946cbfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43292038-d81d-6324-467c-000009384d0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/nzX44SVMY.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/nzX44SVMY.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfa41bb-20b9-2d02-d08d-000089773134","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlc.zip","pattern":"[url:value = 'https://colibrik.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2457642-78c2-df7e-e36d-0000f8bb77bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.81.174:41032/i","pattern":"[url:value = 'http://222.139.81.174:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ddf9ed-3a02-2099-f813-00006850f260","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/i","pattern":"[url:value = 'http://39.78.182.86:43103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c74e3d9-239b-f607-88ce-000054155e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/bin.sh","pattern":"[url:value = 'http://45.233.94.135:35449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba266b1-d539-0743-4a87-00003b95df67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/i","pattern":"[url:value = 'http://45.233.94.135:35449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd9f9db-5cb3-6ff3-a362-00004fdbaff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/bin.sh","pattern":"[url:value = 'http://202.163.107.242:56229/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bea273-6e95-3012-7a84-00001229d3b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://159.255.31.48:59678/i","pattern":"[url:value = 'http://159.255.31.48:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae111770-6adc-b89a-e62c-0000cfb48934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc","pattern":"[url:value = 'http://91.192.81.41:8080/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c877b0-2752-6f56-d385-0000c4e91e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_64","pattern":"[url:value = 'http://91.192.81.41:8080/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a326be-2b64-b4b6-d431-0000b7b7e741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86","pattern":"[url:value = 'http://91.192.81.41:8080/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b1d325-ee4f-6ac4-f0ea-0000dc83d45b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm6","pattern":"[url:value = 'http://91.192.81.41:8080/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db43f527-9aa0-53cd-26e0-00004f6a10c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/sh4","pattern":"[url:value = 'http://91.192.81.41:8080/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcef90f-fe42-33cb-f79a-00004688b74b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mips","pattern":"[url:value = 'http://91.192.81.41:8080/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a129b9f-80a8-ec13-d18a-000063359880","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc440","pattern":"[url:value = 'http://91.192.81.41:8080/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dc26c0-65cc-1c55-8f28-00002962ced2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_32","pattern":"[url:value = 'http://91.192.81.41:8080/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e2cdd9-ab9c-eed9-551a-0000467e6191","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/m68k","pattern":"[url:value = 'http://91.192.81.41:8080/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb6e3b3-5385-2574-6035-0000643fb33e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm7","pattern":"[url:value = 'http://91.192.81.41:8080/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e1c3fc6-9794-0c05-4907-00002d8bd901","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mpsl","pattern":"[url:value = 'http://91.192.81.41:8080/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b8829f-8e81-dc6e-5629-0000ce367bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm5","pattern":"[url:value = 'http://91.192.81.41:8080/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667b91b2-ebb0-21ac-0725-00009d217c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm","pattern":"[url:value = 'http://91.192.81.41:8080/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cce24f5-e165-b7b6-20a2-0000ca4dfaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/bin.sh","pattern":"[url:value = 'http://27.152.10.88:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1525bd4-1432-8490-b163-0000a2dc6cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/bin.sh","pattern":"[url:value = 'http://105.225.189.234:48747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8bf476a-45db-f10c-e6fe-000055d07c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.4.133:60713/i","pattern":"[url:value = 'http://125.41.4.133:60713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70992961-f40c-2814-972a-000070f650c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/982cd0","pattern":"[url:value = 'http://5.182.210.174/982cd0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb96d9c-b53c-c5f6-24eb-000062911a16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d834af","pattern":"[url:value = 'http://5.182.210.174/d834af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028a1280-d54d-ce55-006a-000060da44c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14acdf","pattern":"[url:value = 'http://5.182.210.174/14acdf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ae244-6176-7427-1991-0000641349f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a0ec06","pattern":"[url:value = 'http://5.182.210.174/a0ec06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37744b91-a221-6cbc-189f-00004c42b4b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/597d4b","pattern":"[url:value = 'http://5.182.210.174/597d4b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d49ec0-6d83-5fc6-2b8d-00000ba56265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e04f45","pattern":"[url:value = 'http://5.182.210.174/e04f45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55c1155-b0ce-4a25-ee6f-0000af0597cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/797dff","pattern":"[url:value = 'http://5.182.210.174/797dff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14858b9b-9566-7a64-4678-000040952484","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f82d25","pattern":"[url:value = 'http://5.182.210.174/f82d25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3009232d-1af3-194f-051b-000003965fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1294b8","pattern":"[url:value = 'http://5.182.210.174/1294b8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13bc35f-13bb-2a66-9a79-0000c24a414b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/370ef8","pattern":"[url:value = 'http://5.182.210.174/370ef8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02403f8-e7d1-7ddf-93ee-0000588fd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aede8d","pattern":"[url:value = 'http://5.182.210.174/aede8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36387ce4-dbc1-f9cd-5d91-0000f115b380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c060bd","pattern":"[url:value = 'http://5.182.210.174/c060bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bc4842e-c7a1-d08f-d57a-0000054375e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74d9f9","pattern":"[url:value = 'http://5.182.210.174/74d9f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c725c74e-e0ca-4621-3a35-000041cd706d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79743e","pattern":"[url:value = 'http://5.182.210.174/79743e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7561d69b-af7f-13e7-2226-0000e8e7219d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8a90f5","pattern":"[url:value = 'http://5.182.210.174/8a90f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfde209f-900b-38c3-66c3-0000f6d661dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/08040b","pattern":"[url:value = 'http://5.182.210.174/08040b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04cc01de-be18-7d85-f1b2-0000f8a8e24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4af73","pattern":"[url:value = 'http://5.182.210.174/b4af73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a0a1e-ac89-6e0a-9274-0000f8f4ca22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90e1de","pattern":"[url:value = 'http://5.182.210.174/90e1de']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9663bf23-852f-160b-9924-0000799b3f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7202b4","pattern":"[url:value = 'http://5.182.210.174/7202b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19389b66-61ad-4df3-f124-0000029b196a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ef423","pattern":"[url:value = 'http://5.182.210.174/6ef423']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7687d518-faf3-2ca1-50ec-000069d090c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d97308","pattern":"[url:value = 'http://5.182.210.174/d97308']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72825d66-1027-caf1-8cdd-0000b48f335b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d19a37","pattern":"[url:value = 'http://5.182.210.174/d19a37']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89aaf4e0-bf63-58df-cf78-00001b47fbc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae9a6b","pattern":"[url:value = 'http://5.182.210.174/ae9a6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0107a68-c01f-bed7-1342-00007ad55e8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5a848f","pattern":"[url:value = 'http://5.182.210.174/5a848f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99d15cc-ae8c-0f4f-8ce8-0000d5c823be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50edcc","pattern":"[url:value = 'http://5.182.210.174/50edcc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e427499-41b1-d483-3106-0000d5355ae1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/846cac","pattern":"[url:value = 'http://5.182.210.174/846cac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eb4a44-aee1-5dd2-0e2e-0000beabfc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba641b","pattern":"[url:value = 'http://5.182.210.174/ba641b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6450097-933d-33a2-a456-00000a9c5e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85a4f4","pattern":"[url:value = 'http://5.182.210.174/85a4f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc2c4a8-c43b-e534-7e9b-0000f9e1f85c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b6973a","pattern":"[url:value = 'http://5.182.210.174/b6973a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ab5890d-933c-ea49-1fec-0000ade4b296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/29ea88","pattern":"[url:value = 'http://5.182.210.174/29ea88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5245a95b-5fa1-8d6b-9033-0000edec3612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/adb88f","pattern":"[url:value = 'http://5.182.210.174/adb88f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408deab6-856f-c37c-56b0-0000023d23b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7a381","pattern":"[url:value = 'http://5.182.210.174/b7a381']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180aace0-0cf2-ee7c-1dc4-0000bff38fed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/24dc12","pattern":"[url:value = 'http://5.182.210.174/24dc12']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc500059-6331-059b-8e82-0000fc7001b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8b233","pattern":"[url:value = 'http://5.182.210.174/b8b233']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e334fee-dea5-787a-1ea5-00009f3b8a56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e7b8f7","pattern":"[url:value = 'http://5.182.210.174/e7b8f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d1e986-cbe3-3d65-91ff-00006fa68853","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b87566","pattern":"[url:value = 'http://5.182.210.174/b87566']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d2d840-618b-abe8-e766-0000a5d034b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/i","pattern":"[url:value = 'http://27.152.10.88:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fc036a-9159-b5fb-65d9-00002e10e6ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5fb90f-adbc-97d2-b2f7-000031f95b1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlc.zip","pattern":"[url:value = 'https://kee126.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f72245-0e27-8572-9bd2-0000064c2b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://130.12.209.153:51945/i","pattern":"[url:value = 'http://130.12.209.153:51945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639331b3-6d46-b404-539f-00009c35c0c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.61.118.232:57819/i","pattern":"[url:value = 'http://115.61.118.232:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96811a4c-87e0-1e05-b65c-0000a76478f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.92.221:44835/i","pattern":"[url:value = 'http://163.142.92.221:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126e01ca-ea63-60b2-8b3f-0000db5f2b34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/bin.sh","pattern":"[url:value = 'http://221.14.36.34:39539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61b2340-7757-5ff2-d8f4-0000b0207615","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9162d4-72d1-0ead-12d6-0000ae3572ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://onlypackaging.grupoinde.com/zz/crypted.ps1","pattern":"[url:value = 'https://onlypackaging.grupoinde.com/zz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacda4f4-13fd-be6c-b209-000069055988","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74346a","pattern":"[url:value = 'http://5.182.210.174/74346a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1558a8-587d-c71e-294c-00003ca27a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/58e1a8","pattern":"[url:value = 'http://5.182.210.174/58e1a8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1306e3b5-4f34-d37c-ac75-0000abd37c5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/905a41","pattern":"[url:value = 'http://5.182.210.174/905a41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1214ac-afb2-01f4-ee25-0000f9034788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acaa53","pattern":"[url:value = 'http://5.182.210.174/acaa53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daac44ed-da8f-143c-3670-00001e396345","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bfe63f","pattern":"[url:value = 'http://5.182.210.174/bfe63f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922a675e-3714-8708-952d-000063537230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4c7cb5","pattern":"[url:value = 'http://5.182.210.174/4c7cb5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c8be5c-d34a-e607-a27c-00007e295b99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/efeb39","pattern":"[url:value = 'http://5.182.210.174/efeb39']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be63e47b-12af-15ae-354f-0000427bc4ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7d4dfe","pattern":"[url:value = 'http://5.182.210.174/7d4dfe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c952eea1-11bc-69d5-73a1-000069549c8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eaa22","pattern":"[url:value = 'http://5.182.210.174/3eaa22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1db5eeb-107c-d6d7-371b-000064f801c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e3530c","pattern":"[url:value = 'http://5.182.210.174/e3530c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00d739a5-9490-c046-bff6-00003df610e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/89e244","pattern":"[url:value = 'http://5.182.210.174/89e244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e7516f-1e42-d63a-57ba-00002a33d28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/699b25","pattern":"[url:value = 'http://5.182.210.174/699b25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3011ef7-ca45-b3df-b533-0000e7bb2f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/i","pattern":"[url:value = 'http://221.14.36.34:39539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d44ca4-b2d0-f899-0666-0000f775a656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:47543/i","pattern":"[url:value = 'http://125.47.87.135:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7140dba-99f0-1a71-5415-000093cb948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0d23de-863c-c411-4ffc-0000b3795656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.139/Xloadfile/bin.exe","pattern":"[url:value = 'http://195.177.94.139/Xloadfile/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9b6442-9ac6-e328-d20e-0000e124f874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlccz.zip","pattern":"[url:value = 'https://colibrik.com/vlccz.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c7cb87-ac7d-f601-2f5a-00003d0211ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/bin.sh","pattern":"[url:value = 'http://42.239.240.192:35535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6143ffce-7b07-09cc-e374-000013b613dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/bin.sh","pattern":"[url:value = 'http://125.45.10.162:57743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3dc715-52fc-4646-802c-000032482940","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.63.144:39989/i","pattern":"[url:value = 'http://105.184.63.144:39989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44573107-0f74-728d-dcdf-0000c26b908a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/i","pattern":"[url:value = 'http://42.239.240.192:35535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa20572-be1e-e9e8-73ec-0000e6accfeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/bin.sh","pattern":"[url:value = 'http://222.139.94.187:45764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c2a2c1-37a3-1502-1ecd-00008d40c488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.157.243.235:47252/bin.sh","pattern":"[url:value = 'http://91.157.243.235:47252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--800151e9-6b4e-6823-cd4c-000086e2f282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/i","pattern":"[url:value = 'http://222.139.94.187:45764/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5225f8d6-ffde-fcbe-bc64-0000ea13b38c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.4.180:60816/i","pattern":"[url:value = 'http://42.179.4.180:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde6d48f-e7da-5b94-a429-0000b2225e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/bin.sh","pattern":"[url:value = 'http://42.235.171.234:44993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a416b4-f047-e526-51ca-0000fb02c15c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/i","pattern":"[url:value = 'http://60.184.140.145:34890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3633620d-91ef-b1cd-1625-000014b5bef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/i","pattern":"[url:value = 'http://42.85.28.108:53934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3dd1e0-939e-98a4-8cc6-00009ddf2d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.15.53:45156/bin.sh","pattern":"[url:value = 'http://42.54.15.53:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a136c67-4fbd-92bb-e39c-0000f418fd14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/i","pattern":"[url:value = 'http://42.52.206.146:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf522c73-c161-182f-0974-00001e95c81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/bin.sh","pattern":"[url:value = 'http://196.188.75.58:44319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb90b9a-7142-bb9a-4796-000055bbaaf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.163.85.239:39124/bin.sh","pattern":"[url:value = 'http://45.163.85.239:39124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d064785-ebe4-bb1b-49f3-000045d3e07f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/bin.sh","pattern":"[url:value = 'http://42.52.206.146:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ebe9ee7-d72a-3b65-322f-00009bc0ba1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.15.53:45156/i","pattern":"[url:value = 'http://42.54.15.53:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73854b15-3212-0cfd-8de2-000060c4c527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/bin.sh","pattern":"[url:value = 'http://182.130.209.58:35031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06dd4793-e19c-43bf-218e-00004c7934aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.127.49.161:56955/bin.sh","pattern":"[url:value = 'http://222.127.49.161:56955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--990be191-6865-2bf2-7a95-0000d8108cd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/bin.sh","pattern":"[url:value = 'http://91.234.61.90:34549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50180be2-fa26-208f-0c3e-0000ae8800ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/bin.sh","pattern":"[url:value = 'http://42.85.28.108:53934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368437bf-58f1-c90a-e300-000040a61bb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.49.161:56955/i","pattern":"[url:value = 'http://222.127.49.161:56955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd209f27-ee83-a477-8bb5-000004c3a32b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/i","pattern":"[url:value = 'http://91.234.61.90:34549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e80f53-1c96-b312-c0fb-0000b3c5a376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.26.85:51916/bin.sh","pattern":"[url:value = 'http://42.5.26.85:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61125e88-f154-e2e6-3061-0000ccd10e65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:47551/i","pattern":"[url:value = 'http://196.189.130.28:47551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1301fa-e1d5-41dd-53ff-0000d180c369","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/bin.sh","pattern":"[url:value = 'http://42.87.111.88:33491/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed3b46d-f32e-fb70-c2ea-00002b0af5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/bin.sh","pattern":"[url:value = 'http://42.235.140.235:50010/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeebacfa-ae51-45b5-bc7d-0000794f7b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.75.38.154:4194/i","pattern":"[url:value = 'http://211.75.38.154:4194/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dac89b7-1bf6-ae62-9b94-000001466187","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/i","pattern":"[url:value = 'http://42.235.140.235:50010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c24dccf-8f21-c4cf-a76d-00007f0bfa2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/i","pattern":"[url:value = 'http://42.235.171.234:44993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7861352-a144-d65e-23d9-0000fe7ad820","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.148.182:60566/i","pattern":"[url:value = 'http://42.239.148.182:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9e13af-ae15-ab86-6bea-0000500aa0a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.178.45.124:57472/i","pattern":"[url:value = 'http://42.178.45.124:57472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3039d9c9-4934-9d59-f3ad-000065f71e0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/i","pattern":"[url:value = 'http://183.159.187.179:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd33ae32-9e4e-2387-e008-00005ccd84fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/bin.sh","pattern":"[url:value = 'http://183.159.187.179:34226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717b29e-b756-eb8f-71fb-000056db997e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.38.16.176:54968/i","pattern":"[url:value = 'http://78.38.16.176:54968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7639b0db-82ab-bf7c-dae9-0000ce6ab9b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.21.251.3:42743/bin.sh","pattern":"[url:value = 'http://58.21.251.3:42743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f296bfd6-3b90-d0e2-99b8-0000074388d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.136.165:55956/i","pattern":"[url:value = 'http://59.180.136.165:55956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e0b4c0-77af-67a0-8f73-0000457a5a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/bin.sh","pattern":"[url:value = 'http://182.244.41.109:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae6e86-4604-aad2-0a41-0000dbdeead0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/i","pattern":"[url:value = 'http://125.45.10.162:57743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afdc6276-d12a-f0b8-9589-00007ca4c639","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.224.231:49757/i","pattern":"[url:value = 'http://123.10.224.231:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c9c52a-2acb-9598-c9b3-00009599df24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/bin.sh","pattern":"[url:value = 'http://42.235.49.187:35712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e39d7fc-105f-464f-7fa0-0000d9d414d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.202/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6ecaaa-f76e-0856-220a-0000bb86eea8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.202/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3f8d91-4830-00b9-d79d-000030ec5c19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd5cac5-32e1-cf87-8845-0000a4be08b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8705b98c-1a57-5c99-c3e7-0000593446b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.i486","pattern":"[url:value = 'http://176.65.139.202/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f91fc6-9d7c-7a1c-e3c6-0000686feb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.arc","pattern":"[url:value = 'http://176.65.139.202/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f3ed90-9987-b927-6d1a-0000c601d3a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/a.sh","pattern":"[url:value = 'http://176.65.139.202/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c795654-16ee-e260-01d7-00005afbf084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.202/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--846e3409-4309-7724-c815-0000ea87c10d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee3a847-aa21-521c-80f4-0000de7e5bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665997f6-8bca-2344-5f02-00006988bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.202/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f89906-be57-9efc-53ee-0000e31e7266","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5215e32a-6bf9-3982-b01e-0000d922c20e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mips","pattern":"[url:value = 'http://176.65.139.202/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35cefb84-0718-9032-c288-000099de2106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e661d8-1681-a1a4-a7a3-000042633ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.202/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a689a64-6b0c-c01f-d30d-0000736fadc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/bin.sh","pattern":"[url:value = 'http://125.47.59.152:33986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7083b5aa-5b93-c5c1-dad2-0000cd9a150f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/bin.sh","pattern":"[url:value = 'http://124.234.219.153:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39c0f91-d1df-3ec1-2051-00007686542a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/i","pattern":"[url:value = 'http://42.235.49.187:35712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68636258-0161-c605-fd3d-000015a90309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/bin.sh","pattern":"[url:value = 'http://123.132.182.114:59660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736cc10b-458e-644a-698b-00006ec66140","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/i","pattern":"[url:value = 'http://125.47.59.152:33986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11222c30-658e-0fda-f927-00003c4c8a65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.228.140.10:33110/i","pattern":"[url:value = 'http://113.228.140.10:33110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f49cc-84c7-2ea3-0efd-0000ab1b8280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c83d114-72fa-e040-54fb-000003cb689a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/i","pattern":"[url:value = 'http://123.132.182.114:59660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21d4aa0-2fb9-2ace-c8b7-0000449ed36a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/i","pattern":"[url:value = 'http://42.231.79.131:52303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58e78b1-0b5a-2908-780e-0000dd0c8ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.sh4","pattern":"[url:value = 'http://94.154.43.181/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b4184f-0762-2994-f600-0000c1a760c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm7","pattern":"[url:value = 'http://94.154.43.181/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc8f1f0-4f85-4df7-da0b-0000d9aaaccc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mipsel","pattern":"[url:value = 'http://94.154.43.181/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0dc9ae6-7b87-f3ee-291a-00005dd21513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.ppc","pattern":"[url:value = 'http://94.154.43.181/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0761ebbe-530a-4dbe-7690-0000bc89ed5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.aarch64","pattern":"[url:value = 'http://94.154.43.181/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54588c3b-8004-b399-b72c-00002ece410a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.i686","pattern":"[url:value = 'http://94.154.43.181/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b61c24-540e-ef0a-211d-00000f47e07e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm","pattern":"[url:value = 'http://94.154.43.181/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1aeeb97-6789-aaa6-c77f-000080ce4ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.x86_64","pattern":"[url:value = 'http://94.154.43.181/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cc02f3-0f8c-8a40-674e-0000e31064bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mips","pattern":"[url:value = 'http://94.154.43.181/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9321d318-349e-a436-edba-0000003f3177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/adbpersist.arm7","pattern":"[url:value = 'http://94.154.43.210/adbpersist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3896cf5d-30df-434c-8861-0000c51c0585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/ppc","pattern":"[url:value = 'http://94.154.43.210/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17446498-352d-3b63-0964-0000775687db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arc","pattern":"[url:value = 'http://94.154.43.210/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aff381e-a3aa-3135-2348-0000d85398a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm7","pattern":"[url:value = 'http://94.154.43.210/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8722a2-df7d-c2bc-da53-0000fae49cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mips","pattern":"[url:value = 'http://94.154.43.210/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df80888-a1a2-5c16-3ff0-000060efffcd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm6","pattern":"[url:value = 'http://94.154.43.210/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc42d0a-8f7a-b98d-1f86-000045c29c73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/sh4","pattern":"[url:value = 'http://94.154.43.210/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0fc499f-2485-c056-93b4-00009789f0e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm","pattern":"[url:value = 'http://94.154.43.210/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b55e46b-54c5-aa59-e96b-000091e7f297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mpsl","pattern":"[url:value = 'http://94.154.43.210/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ab1674-3f21-4329-be30-0000fa124a07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/m68k","pattern":"[url:value = 'http://94.154.43.210/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80102f9b-39c5-1499-fb18-00000a9b3a36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/i","pattern":"[url:value = 'http://36.70.235.87:40268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ad07104-4b16-6fc7-0f24-00004388772b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/spc","pattern":"[url:value = 'http://94.154.43.210/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f15932-b3ae-c1c3-620b-0000725a5023","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm5","pattern":"[url:value = 'http://94.154.43.210/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9aca7b-48c2-7340-6a9c-00008d1d875b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mips","pattern":"[url:value = 'http://94.154.43.85/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff1d4b1-55dc-f6d7-a5ca-00001f0413e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv6l","pattern":"[url:value = 'http://94.154.43.85/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c0e44b3-7f60-cb88-832b-000040c3a2ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/i686","pattern":"[url:value = 'http://94.154.43.85/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa2df167-1381-a7e6-e6d0-0000f1961428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mipsel","pattern":"[url:value = 'http://94.154.43.85/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6eae5f0-f053-2f77-231c-000022643a57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv7l","pattern":"[url:value = 'http://94.154.43.85/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e808e3fc-10f0-1141-8f2a-00003320e7ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/amd64","pattern":"[url:value = 'http://94.154.43.85/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ea3215-bccd-1e46-b215-000043347bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/x86","pattern":"[url:value = 'http://94.154.43.85/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b4c409-9ba5-2ec3-b249-0000983d1bec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/ppc64","pattern":"[url:value = 'http://94.154.43.85/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4dc8772-43c9-37c4-427c-000058a46937","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv5l","pattern":"[url:value = 'http://94.154.43.85/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fda927f-08b4-2718-b0f1-00008eaab9be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.53.157:42588/Mozi.a","pattern":"[url:value = 'http://39.61.53.157:42588/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c757a2-28fe-9d39-d027-0000de7050e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/bin/support.client.exe","pattern":"[url:value = 'http://203.159.90.118/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7780072-e841-2f13-69a3-0000fddd0049","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d85783f-0dd2-1fda-7abc-0000a17563cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/bin/support.client.exe","pattern":"[url:value = 'http://192.159.99.42/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44488e7b-048d-f4b7-8507-000071d5be3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb652e09-bb01-5d78-28d3-0000cd78e211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cfa1bf-1bf6-9f5b-06c2-000086b3aea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e0207d","pattern":"[url:value = 'http://5.182.210.174/e0207d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf135bc-03c4-7e0a-abd8-000050b942bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d81575","pattern":"[url:value = 'http://5.182.210.174/d81575']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1841a6b-59b8-3c91-6a6b-0000ea0cdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14f97a","pattern":"[url:value = 'http://5.182.210.174/14f97a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5b0dac-38a6-cab3-7422-00006d0317b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c02601","pattern":"[url:value = 'http://5.182.210.174/c02601']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6806881-f280-4fe4-92f1-0000541d5660","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61e952","pattern":"[url:value = 'http://5.182.210.174/61e952']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--780c51b9-4497-4eb9-1548-000094efa077","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/005679","pattern":"[url:value = 'http://5.182.210.174/005679']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884b6749-182f-0879-9f83-0000408f9611","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98fab6","pattern":"[url:value = 'http://5.182.210.174/98fab6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2820f8a2-e8d6-2be3-8961-0000c98187f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/829f73","pattern":"[url:value = 'http://5.182.210.174/829f73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6f93b9-7297-3d37-0b8e-0000b99825dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://v-k.com.ua/vcapcha.ps1","pattern":"[url:value = 'http://v-k.com.ua/vcapcha.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515e4aa1-2c3f-9db9-c16b-0000aa89a9d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/197001","pattern":"[url:value = 'http://5.182.210.174/197001']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d0215-52cf-243f-8b17-0000f2194b87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70504f","pattern":"[url:value = 'http://5.182.210.174/70504f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39cc98c-ecbf-16c7-140f-0000ffd814c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2cd0c9","pattern":"[url:value = 'http://5.182.210.174/2cd0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449232b6-8d34-9d98-ed89-0000c6d46151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0eede3","pattern":"[url:value = 'http://5.182.210.174/0eede3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c45bb50-4bf4-db2e-2389-0000994da93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11700068-bae9-5276-b2ae-0000e2b7ae1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/bin/support.client.exe","pattern":"[url:value = 'http://94.154.32.180/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78b3582-759b-1ad1-88a8-0000ce9c12f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bce7e5-680d-98be-86c5-000088b7cd9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.68/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a980d5-aad0-7581-63be-0000ebbd31e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4949a4-4429-1dc1-cfb5-000004bcbd77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.205/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbaac499-1f03-ee9f-6ad4-00009f219ed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acba074c-9bae-8e99-207c-0000e903fdf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.55.26.114:46700/i","pattern":"[url:value = 'http://116.55.26.114:46700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dab7761-499e-7e48-6eda-00009c197185","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/i","pattern":"[url:value = 'http://105.225.189.234:48747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdfaa030-1166-8966-5ade-000023720718","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.94.220:54475/i","pattern":"[url:value = 'http://163.142.94.220:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c582fa-1b79-c425-2061-0000ae9e7f79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/bin.sh","pattern":"[url:value = 'http://182.116.20.246:39870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a59358-dc9f-7bd8-e043-00006a09b410","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.54.109/spamget.exe","pattern":"[url:value = 'http://178.16.54.109/spamget.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91a6ddd-64eb-44f5-f12c-00005c160ff4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/bin.sh","pattern":"[url:value = 'http://222.142.244.196:59371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817c1070-4ce2-4975-0e24-0000b3f60239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/Mozi.a","pattern":"[url:value = 'http://113.228.208.46:56903/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a81c22-4dc5-2f13-573a-0000f1c5a165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.144.211:51836/bin.sh","pattern":"[url:value = 'http://59.180.144.211:51836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8340af0a-ff67-b318-135b-0000a6a2214d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/i","pattern":"[url:value = 'http://222.142.244.196:59371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1deccde2-0533-3112-6678-000089f8462d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.237.221:39602/i","pattern":"[url:value = 'http://125.42.237.221:39602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce9a0b0-043a-867c-a412-000046f95d17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.87.19:46712/bin.sh","pattern":"[url:value = 'http://163.142.87.19:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e534a33-2f4f-e0c4-9ca4-00002aafb928","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.230:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11157509-ad80-7755-a8ec-0000c4321768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/i","pattern":"[url:value = 'http://46.236.65.230:33052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd350540-e214-3002-1eed-0000af28f8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/bin.sh","pattern":"[url:value = 'http://61.52.158.83:45555/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5656b29-4565-d4cd-2653-0000783b1faf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.46.143:53645/bin.sh","pattern":"[url:value = 'http://39.61.46.143:53645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b31cd-3afb-d35e-6767-000021398ef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/bin.sh","pattern":"[url:value = 'http://115.194.179.106:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--253d5e53-6d29-535a-c5da-0000e6dce9a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/i","pattern":"[url:value = 'http://42.59.235.202:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c7ff8c-d391-93e9-ef04-00008a7d0d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.178.159:48639/i","pattern":"[url:value = 'http://115.201.178.159:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--557f1a91-4f75-b215-e2a4-00007830014a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/i","pattern":"[url:value = 'http://61.52.158.83:45555/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac30290-99ba-8b95-b534-0000393e0cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/i","pattern":"[url:value = 'http://115.194.179.106:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475a98da-17cc-7881-2860-0000464e4df7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.4.254.241:52598/bin.sh","pattern":"[url:value = 'http://31.4.254.241:52598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1777cdf5-cbb9-ff44-602f-0000f74cb91e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://117.26.82.102:41542/i","pattern":"[url:value = 'http://117.26.82.102:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05683afb-f572-2d04-4429-00002b27ee89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.251.126:60468/bin.sh","pattern":"[url:value = 'http://61.137.251.126:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86d8555-644f-be62-f806-0000ebf6d8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.112.59.91:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.91:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--166d6296-7206-06e6-bc4e-00006920953a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.251.126:60468/i","pattern":"[url:value = 'http://61.137.251.126:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063f5e7f-7426-6757-cd70-000039853722","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://68.168.20.218:18081/f8YlUiZDcEOZ","pattern":"[url:value = 'http://68.168.20.218:18081/f8YlUiZDcEOZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb7bd1b-fe4c-5942-91f3-0000e06bffce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/bin.sh","pattern":"[url:value = 'http://115.49.64.122:48159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--242db813-89d3-4a53-54c9-000083d52066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.91:60395/i","pattern":"[url:value = 'http://125.112.59.91:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f03eda-460d-155d-ce0e-000088101c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/i","pattern":"[url:value = 'http://115.49.64.122:48159/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138a9e34-06d8-493e-0b09-000035bbc55b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.94:37532/bin.sh","pattern":"[url:value = 'http://113.221.25.94:37532/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8617ae2f-fa7f-8e83-f6f7-000074305055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60afb36-5832-c824-6373-0000c30d0d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/bin.sh","pattern":"[url:value = 'http://124.131.166.85:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed4c5035-82d5-2810-2be3-0000130732d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/i","pattern":"[url:value = 'http://124.131.166.85:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1a58de8-c4f6-da4a-bdcc-00007b167566","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/i","pattern":"[url:value = 'http://58.208.16.203:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36cd8ed-cb37-e6e3-46a7-000058a9648a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/bin.sh","pattern":"[url:value = 'http://58.208.16.203:3588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebbc599-aa99-76ac-b182-0000ec8a8fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.60.37:49335/i","pattern":"[url:value = 'http://175.173.60.37:49335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cb8e-47e9-64ca-eff0-0000b400f8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.243.79:60816/i","pattern":"[url:value = 'http://175.147.243.79:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c8a6fb4-2ae5-b309-f710-0000d9290e78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/i","pattern":"[url:value = 'http://182.116.51.119:37449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0faedb9-9873-c40b-e54f-000088411632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/bin.sh","pattern":"[url:value = 'http://182.116.51.119:37449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834af59-ca49-be73-b4f3-00009f30043a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/bin.sh","pattern":"[url:value = 'http://220.192.234.145:55381/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1230ac04-4daf-b990-96a2-0000d7142e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/i","pattern":"[url:value = 'http://220.192.234.145:55381/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76de7735-e628-6a9d-0857-0000d7c37241","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/bin.sh","pattern":"[url:value = 'http://42.177.103.199:46495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2d0abb-0443-e269-891c-0000824de02b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/i","pattern":"[url:value = 'http://42.177.103.199:46495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3926464-0df0-5858-2807-0000a4387a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325591.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325591.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35de0067-63d4-5be7-2ef7-0000d88567ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/bin.sh","pattern":"[url:value = 'http://85.15.117.156:37936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834bc3a-f490-ebc6-d606-0000b44e30d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/bin.sh","pattern":"[url:value = 'http://222.138.117.213:54917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3c5946-4dde-8491-c72f-0000c4772e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/i","pattern":"[url:value = 'http://222.138.117.213:54917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174f0547-7efb-22e1-2a38-00001ab776b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/i","pattern":"[url:value = 'http://85.15.117.156:37936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318bb507-6a5b-c2d6-2d91-000012e1534f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/bin.sh","pattern":"[url:value = 'http://123.8.162.45:59164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69134f98-0e35-f2a9-4764-0000f429be9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.177.126:57685/i","pattern":"[url:value = 'http://175.150.177.126:57685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7457757-1770-50b4-cb47-0000fb4d2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-04.cfd/installer.exe","pattern":"[url:value = 'https://mon-blanc-04.cfd/installer.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4783db32-1350-b8bf-e897-0000c5e4ba59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/bin.sh","pattern":"[url:value = 'http://105.158.197.238:53233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7482c5-bda9-2f8e-9d69-00003dcf5e27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.60.89:60712/i","pattern":"[url:value = 'http://112.248.60.89:60712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e401b04-8d38-16fc-848f-00002c956726","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7154708060/EcHFKBJ.exe","pattern":"[url:value = 'http://62.60.226.140/files/7154708060/EcHFKBJ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223ea20e-a123-da23-901b-0000a3b8ab46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/i","pattern":"[url:value = 'http://105.158.197.238:53233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5829898-03e0-f593-7740-0000bd584e3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/bin.sh","pattern":"[url:value = 'http://123.8.30.116:41163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e629510-be74-616c-e995-000047da98bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/bin.sh","pattern":"[url:value = 'http://179.108.90.55:37440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ccc8b3-d406-23ad-5b8c-0000a29fd64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/i","pattern":"[url:value = 'http://123.8.30.116:41163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1df21c5-533e-4b07-a252-0000f9e1cb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/6680549914/ENKpzg6.exe","pattern":"[url:value = 'http://62.60.226.140/files/6680549914/ENKpzg6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd87431-cbe9-e5e0-37d8-000012842cb2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.163.131:49762/i","pattern":"[url:value = 'http://182.120.163.131:49762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f767f3d-ec76-d7b1-800e-0000c9048232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/i","pattern":"[url:value = 'http://179.108.90.55:37440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35f1270-978c-e5eb-6971-000023a7119b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.127.198:37040/i","pattern":"[url:value = 'http://113.231.127.198:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddc8f5c-8dc9-8a42-d74d-0000a2ae88fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/i","pattern":"[url:value = 'http://221.15.214.165:40665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bfc913b-d7fa-a187-d086-000000194ac8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.183.167:47451/i","pattern":"[url:value = 'http://42.235.183.167:47451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab2fc298-7882-bbec-d91f-0000556b24d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/bin.sh","pattern":"[url:value = 'http://123.132.158.53:41696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efaa86af-b33b-bd94-9b01-00007d882a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/bin.sh","pattern":"[url:value = 'http://182.116.20.77:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c785932c-fd67-14ec-cf25-0000029f549b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.228.132.133:38637/i","pattern":"[url:value = 'http://114.228.132.133:38637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32526d2-3dd5-047a-c14b-0000f2a1f370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/i","pattern":"[url:value = 'http://123.132.158.53:41696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94d335f7-b4b9-5e80-3d65-0000f91661b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/bin.sh","pattern":"[url:value = 'http://116.138.108.78:35117/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91754006-44d1-7161-1797-000020edf33b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/i","pattern":"[url:value = 'http://42.225.15.213:35530/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dbc0749-aec4-cfed-7e2b-000006ab9adc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.227.126:60165/i","pattern":"[url:value = 'http://182.119.227.126:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8d8f92-39d2-f7a4-7b48-000025f352a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/i","pattern":"[url:value = 'http://182.116.20.77:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edd1a1-a349-f799-6343-00006a541896","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/i","pattern":"[url:value = 'http://116.138.108.78:35117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2f9a63-cdf1-9ae5-869b-00009e986fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/bin.sh","pattern":"[url:value = 'http://115.54.128.38:41331/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8593c6e-901c-95d6-a349-0000d77b33e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/bin.sh","pattern":"[url:value = 'http://123.7.223.208:48157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2e4b2c-0619-da77-801d-00000a7a6175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/i","pattern":"[url:value = 'http://123.7.223.208:48157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4457a0-fac5-53a9-e133-0000a945560e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/i","pattern":"[url:value = 'http://115.54.128.38:41331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096c1797-ca26-7649-8b66-00004dad4237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.94.45:36545/bin.sh","pattern":"[url:value = 'http://163.142.94.45:36545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c44446c-1f8b-8250-1960-0000501f782e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/bin.sh","pattern":"[url:value = 'http://115.49.210.219:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efbd282-5aa2-ea5c-1fbf-00008fa60617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/i","pattern":"[url:value = 'http://115.49.210.219:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02502118-34a1-2810-a39e-000001b7f373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.4.17.29:54916/i","pattern":"[url:value = 'http://42.4.17.29:54916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81237645-6b30-21e1-1166-00005925a506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/i","pattern":"[url:value = 'http://222.136.52.188:32973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eaa7e07-cdca-9296-c196-000076864dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i586","pattern":"[url:value = 'http://222.223.152.97:800/m.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d08b965-df57-5746-0c55-000081b6d12b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.powerpc","pattern":"[url:value = 'http://222.223.152.97:800/m.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f681430-e7e4-90d2-c6ea-0000bdda9e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i486","pattern":"[url:value = 'http://222.223.152.97:800/m.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef41ecb-917b-9e47-5d58-0000071d352b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv6l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef2f8a-757d-c229-e272-00003a7d1c9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv7l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc27c49-1b6a-2e44-92ef-00007ddd664b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv4l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864e217a-fa63-a5a8-a5e3-0000b0ebd1da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.x86_64","pattern":"[url:value = 'http://222.223.152.97:800/m.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cecc05e-8b22-35f7-f85c-0000f0123f05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i686","pattern":"[url:value = 'http://222.223.152.97:800/m.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da784e96-d01e-a74c-3982-00003dcc1ab3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mips","pattern":"[url:value = 'http://222.223.152.97:800/m.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2254f50-68b1-ef59-4bf3-0000a42fec71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/lilin.sh","pattern":"[url:value = 'http://222.223.152.97:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d94d08-efa2-0f5d-c0e3-000040bd4ffb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv5l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab283b1d-b11e-da85-7dd2-0000e98f32e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mipsel","pattern":"[url:value = 'http://222.223.152.97:800/m.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--970517c5-8a3f-c3ad-80b7-000016fb618b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/wget.sh","pattern":"[url:value = 'http://222.223.152.97:800/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e34f6c-e9eb-28e4-b83d-0000fb599730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.199.146:39260/i","pattern":"[url:value = 'http://182.114.199.146:39260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a704de-4a82-f687-105f-00005fbfae08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/bin.sh","pattern":"[url:value = 'http://182.119.205.237:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f40afb-b45e-cdc0-5696-00000dd807d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/bin.sh","pattern":"[url:value = 'http://125.46.213.70:33401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d515a2d-5c0d-6463-4a8f-000098db44ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/i","pattern":"[url:value = 'http://182.119.205.237:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dede4-e86d-6784-c273-0000824eadf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.93.152:51284/i","pattern":"[url:value = 'http://163.142.93.152:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffbb0c1-9388-12f2-30cb-0000aab13c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/bin.sh","pattern":"[url:value = 'http://123.189.148.227:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0152cd6c-3606-11b2-4016-00004e8aee30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/bin.sh","pattern":"[url:value = 'http://103.172.221.97:35084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700ae5ff-1432-2327-2c10-000089329f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/i","pattern":"[url:value = 'http://123.189.148.227:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5cd5c-9fb3-b922-824e-00003fe42d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/i","pattern":"[url:value = 'http://61.54.190.223:33351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cc92c3-1944-5ca2-9890-0000b63a0b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/i","pattern":"[url:value = 'http://103.172.221.97:35084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588d5f93-3e7a-c6c3-ce7c-0000a509fd59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/bin.sh","pattern":"[url:value = 'http://42.231.89.132:55455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a2bb-86e8-b420-2051-00001f479a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/i","pattern":"[url:value = 'http://42.231.89.132:55455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d1c671a-0621-3995-9062-0000db7ac2ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.231:40959/i","pattern":"[url:value = 'http://27.44.145.231:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d607a526-8802-15f5-f2fb-000085a2a225","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.235.239.18:59915/i","pattern":"[url:value = 'http://124.235.239.18:59915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--929f7570-d01f-9d2c-499d-0000927f2e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.63:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af065966-898c-0d51-948d-00003a36b1bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.163.128.185:59951/i","pattern":"[url:value = 'http://61.163.128.185:59951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1875cfe6-addf-b277-43f3-00003514a796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/bin.sh","pattern":"[url:value = 'http://123.14.96.22:48919/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def9848d-b2cf-a5ac-7e8c-00008615da54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/i","pattern":"[url:value = 'http://123.14.96.22:48919/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03e89ef-81df-5679-6407-00007de8ec7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.36.172:37655/i","pattern":"[url:value = 'http://42.227.36.172:37655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5212dd-9bb0-ecc6-38f3-00008cb6a3ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/bin.sh","pattern":"[url:value = 'http://113.221.25.59:57666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9bcc0df-69ac-4f4d-4d92-00007b8e1f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/i","pattern":"[url:value = 'http://183.188.77.45:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8ba468-04dc-67f5-f02c-000002b3fc5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/.bash_history","pattern":"[url:value = 'http://150.241.65.80:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2a6193-bd9b-9f4d-09f5-0000ac7ed0ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://faceit-anti-cheat.com/notify.ps1","pattern":"[url:value = 'http://faceit-anti-cheat.com/notify.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac279d0-5d31-b966-f113-0000f26811a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/i","pattern":"[url:value = 'http://113.221.25.59:57666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b092ea7-60d4-d886-7447-00005a9abfb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://soft-update.dev/get_verify?i=66695","pattern":"[url:value = 'https://soft-update.dev/get_verify?i=66695']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6d1da3-9df2-da2e-f810-0000e327d7a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Drastok.application","pattern":"[url:value = 'https://drastok.xyz/installer/Drastok.application']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3442905-8ab6-8c9b-9847-0000c74a9dc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://auth2api.site/API_REFRESH.scpt","pattern":"[url:value = 'https://auth2api.site/API_REFRESH.scpt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e44a594c-926d-ef52-bc99-000070867f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.54.25.213/d/unix49211821","pattern":"[url:value = 'http://86.54.25.213/d/unix49211821']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d7f22b-2f5d-9ff2-e23d-0000fe532823","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy","pattern":"[url:value = 'https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfeda948-be28-d0de-0c3d-00002b81000c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/gg11","pattern":"[url:value = 'http://150.241.65.80:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a8d82a-189a-98a0-fd04-00005040e2d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF","pattern":"[url:value = 'https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff8b0a3-c454-d77e-bfdc-000078eb720e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67eefd","pattern":"[url:value = 'http://5.182.210.174/67eefd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32127dfb-c608-1591-352d-000024cfaf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d9d6f9","pattern":"[url:value = 'http://5.182.210.174/d9d6f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddbe3b1-098e-78db-04a3-000054b87af7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20302a69-fd59-9544-7bf8-0000fac249a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b85c0","pattern":"[url:value = 'http://5.182.210.174/2b85c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba776bd-9973-dc16-1e94-00000827c06d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2c07b9","pattern":"[url:value = 'http://5.182.210.174/2c07b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0856071-7167-39a9-b447-0000596a5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d95abb","pattern":"[url:value = 'http://5.182.210.174/d95abb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59617dd3-440a-7f16-042d-0000db9d98eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/334215","pattern":"[url:value = 'http://5.182.210.174/334215']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86db2a11-2e7d-ec66-7c1b-000097f84b1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7c899f","pattern":"[url:value = 'http://5.182.210.174/7c899f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e2f716-2d19-bac9-8bf6-0000f9246e51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5adf18","pattern":"[url:value = 'http://5.182.210.174/5adf18']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9209980-d076-406a-4a0e-00008eae4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f6f76d","pattern":"[url:value = 'http://5.182.210.174/f6f76d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--689836ba-b924-92ef-4dc2-00004b77b403","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da8d2e","pattern":"[url:value = 'http://5.182.210.174/da8d2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff844d2-64df-d5b1-b702-00005d085400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9922af","pattern":"[url:value = 'http://5.182.210.174/9922af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d0aa27-d1dc-f141-a752-00001b4f9355","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/http","pattern":"[url:value = 'http://5.182.210.174/http']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669e796f-2fec-6b7b-2101-00005eb7b529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9b83","pattern":"[url:value = 'http://5.182.210.174/9c9b83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2db887a-7624-6e91-7294-00004f4bb1f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227:8080/bot.x86_64","pattern":"[url:value = 'http://94.154.43.227:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dadf802-b6bb-13ef-633c-000083f0257d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.239.124.108/atomic/main_x86_64","pattern":"[url:value = 'http://77.239.124.108/atomic/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ab05cc-5c11-f869-501b-000050b0a42c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pawsockenjoyer.site/z7/webhook","pattern":"[url:value = 'https://pawsockenjoyer.site/z7/webhook']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7353fbef-4253-5e44-4475-000053e2ea78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc3.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc3.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a26f36-684e-ad7e-d687-00000e2d69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/bin.sh","pattern":"[url:value = 'http://182.122.199.106:34085/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84675f50-7abe-1a7c-04f5-0000763fdefa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/bin.sh","pattern":"[url:value = 'http://125.41.75.183:52478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1e652f9-ceef-aa00-a81d-00008f87758b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.190:54106/i","pattern":"[url:value = 'http://115.48.146.190:54106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adcccfa2-ef38-e236-8c3d-0000f03a8917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/bin.sh","pattern":"[url:value = 'http://61.52.45.140:49405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f0701a-0da8-629e-2974-00007745e854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/i","pattern":"[url:value = 'http://182.122.199.106:34085/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7c7a30-449a-80fd-7c64-00005c7e0caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.187:46359/i","pattern":"[url:value = 'http://115.55.130.187:46359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4d5538-4df6-b482-173e-000011af6501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/i","pattern":"[url:value = 'http://125.41.75.183:52478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bbba2a-93c4-8f27-1516-00008335aa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/bin.sh","pattern":"[url:value = 'http://125.47.87.135:56962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513ac95f-06c1-dbfd-dafc-00004fa299c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/i","pattern":"[url:value = 'http://61.52.45.140:49405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b460b97f-bc53-76f6-7066-0000d36e1ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.145.166:55070/i","pattern":"[url:value = 'http://39.74.145.166:55070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f326b9b-ab3e-316b-9723-00004beef13c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/i","pattern":"[url:value = 'http://27.202.245.161:52186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75eb78f-e6f0-420e-cbef-000039485d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/i","pattern":"[url:value = 'http://196.190.105.170:51134/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c4db08-83cd-55b8-2b7a-000004a00ee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/i","pattern":"[url:value = 'http://125.47.87.135:56962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3011443d-2407-0cac-9bcc-0000266099ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/bin.sh","pattern":"[url:value = 'http://60.18.84.125:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205939c0-15cf-b8ee-b041-000079eab724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/i","pattern":"[url:value = 'http://61.163.131.68:44551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d67ed39d-0130-d997-6613-00001c15a43c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5802330c-ccf7-bb2b-5a2b-0000e709b88e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e3f11-49ed-bde9-cebb-000056f48bd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2999be22-296c-940f-de07-00003c2a7fdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/bin.sh","pattern":"[url:value = 'http://222.127.53.189:47969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--422bfd00-e055-e4f8-780d-0000f9d8235c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1787387436870.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1787387436870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafed242-aa4f-8030-0c1e-00006e63645c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.75.158:39827/i","pattern":"[url:value = 'http://123.173.75.158:39827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9709d526-cd7d-5a04-2a15-00004d25f695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/bin.sh","pattern":"[url:value = 'http://222.137.147.215:41949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4241acdf-7084-e198-53af-000071cab502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/i","pattern":"[url:value = 'http://222.127.53.189:47969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e8a150-812e-b934-5467-000081078c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://practisingcertificateprotection.com/Installer_91473f.msi","pattern":"[url:value = 'https://practisingcertificateprotection.com/Installer_91473f.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c96ca5-1bab-09b2-92ec-0000003584e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlcc.zip","pattern":"[url:value = 'https://kee126.com/vlcc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b90eb3-ad2e-5aec-8c92-00001f502307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827302ec-627a-495e-6297-0000afb42eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.183.90:33830/i","pattern":"[url:value = 'http://123.14.183.90:33830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f5319f-383d-f59c-7af0-000009b3bb4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20fbae","pattern":"[url:value = 'http://5.182.210.174/20fbae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78efa237-dd10-9fda-0e37-000079d69741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/374166","pattern":"[url:value = 'http://5.182.210.174/374166']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9094d3-3668-2b05-2333-00009e9b1221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9f0d8c","pattern":"[url:value = 'http://5.182.210.174/9f0d8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7658d761-f7b5-39d2-3ec1-000016aa6ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/bin.sh","pattern":"[url:value = 'http://115.50.157.21:42304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88726f60-fa9f-0c2c-a0bd-0000e0cfe97e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4878f","pattern":"[url:value = 'http://5.182.210.174/c4878f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec1070b-b986-4591-de0b-00005b01ce30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1416b6","pattern":"[url:value = 'http://5.182.210.174/1416b6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db5cc07b-46f9-db7e-e461-000005f50855","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da703f","pattern":"[url:value = 'http://5.182.210.174/da703f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281153c5-eb36-f3a5-5e78-000098343f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45d4ef","pattern":"[url:value = 'http://5.182.210.174/45d4ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d68a1fe-2045-7038-fcf9-0000bf597fdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79d8a6","pattern":"[url:value = 'http://5.182.210.174/79d8a6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669c6c-c600-7421-7a64-0000cc9e760f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1f4418","pattern":"[url:value = 'http://5.182.210.174/1f4418']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4480d5e-56c3-e4ed-c5ca-00005ffdf15f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9bf687","pattern":"[url:value = 'http://5.182.210.174/9bf687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e5b40b-a4ef-e89e-b7a0-0000a8ead72d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/40ab6b","pattern":"[url:value = 'http://5.182.210.174/40ab6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6079f87-ccce-a0ca-b59b-000078b14b6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f653ed","pattern":"[url:value = 'http://5.182.210.174/f653ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3ad684-65fd-1e65-961e-000003244dc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69e5eb","pattern":"[url:value = 'http://5.182.210.174/69e5eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94065ad8-502d-a5cd-de79-0000dedb3159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/75fa66","pattern":"[url:value = 'http://5.182.210.174/75fa66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4adcdb-41f8-82e9-f810-0000ce2ebd9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3d5609","pattern":"[url:value = 'http://5.182.210.174/3d5609']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d519c0-0d6a-3619-0cd1-000008605cec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/abcfc3","pattern":"[url:value = 'http://5.182.210.174/abcfc3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e720570-0b4d-8a1e-f511-000063fbc925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b69b69","pattern":"[url:value = 'http://5.182.210.174/b69b69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a901cd2-89b9-6026-2753-00006c036a63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7252a4","pattern":"[url:value = 'http://5.182.210.174/7252a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee7f8a9-0a83-ed05-1a19-0000c0d43f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/805ade","pattern":"[url:value = 'http://5.182.210.174/805ade']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a772c84-7d2c-b5c8-af6c-0000e51a7949","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f3158a","pattern":"[url:value = 'http://5.182.210.174/f3158a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a386f47-e95a-bf07-e543-00004bc41157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20c791","pattern":"[url:value = 'http://5.182.210.174/20c791']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6f09e0-5a78-1380-152e-0000515b5244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67dfb1","pattern":"[url:value = 'http://5.182.210.174/67dfb1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68204b06-497e-ce9a-a683-0000d8188f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/140cef","pattern":"[url:value = 'http://5.182.210.174/140cef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44da711-90dc-175a-9075-000000b99b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/810904","pattern":"[url:value = 'http://5.182.210.174/810904']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec421a1e-0592-d6b3-4e09-0000ca31115f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e8090c","pattern":"[url:value = 'http://5.182.210.174/e8090c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e6befb-eeec-515a-92eb-00007ec81df5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06d0d9","pattern":"[url:value = 'http://5.182.210.174/06d0d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc68e169-4b06-32ee-40d1-0000b77c9e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a84a56","pattern":"[url:value = 'http://5.182.210.174/a84a56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6576fa6-ca93-cbda-1826-00003ee9d785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/766551","pattern":"[url:value = 'http://5.182.210.174/766551']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f954a7-0514-5337-45ba-000032f7dc96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bd742d","pattern":"[url:value = 'http://5.182.210.174/bd742d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d96ec1cf-0a4c-2b69-07cb-0000166e3e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ceeba2","pattern":"[url:value = 'http://5.182.210.174/ceeba2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdb87a9-cdda-43f1-44e1-0000471c267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/233bc5","pattern":"[url:value = 'http://5.182.210.174/233bc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e13b3f-7bfe-a203-7952-000030fedab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9ab2df","pattern":"[url:value = 'http://5.182.210.174/9ab2df']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d89eb3c-a6be-0bbe-f52b-0000f0e948a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5d1d11","pattern":"[url:value = 'http://5.182.210.174/5d1d11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5927f67-1868-6380-66d1-00000f480fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2509eb","pattern":"[url:value = 'http://5.182.210.174/2509eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326f0910-2a85-c0ff-0c9e-0000e49f216c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d83d","pattern":"[url:value = 'http://5.182.210.174/c5d83d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0951997-0c2a-868b-380e-0000174f25c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07809e","pattern":"[url:value = 'http://5.182.210.174/07809e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a3ada9-9fc8-7886-eada-000076a913ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6da58f","pattern":"[url:value = 'http://5.182.210.174/6da58f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca60e55-4523-8eab-5d45-00003f37823a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/564fd4","pattern":"[url:value = 'http://5.182.210.174/564fd4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ec58ec-9612-2070-7140-00008f5015ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/592521","pattern":"[url:value = 'http://5.182.210.174/592521']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b118e6-cdd9-394d-3bf1-00006764f278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/57965a","pattern":"[url:value = 'http://5.182.210.174/57965a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835749db-16cf-3fbc-ec49-0000a11eafe7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/41308f","pattern":"[url:value = 'http://5.182.210.174/41308f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acdc1fb6-7ef1-4cfd-99aa-0000779a57c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7cf768","pattern":"[url:value = 'http://5.182.210.174/7cf768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44212633-d062-f4cb-56ea-00005dec8d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b2904e","pattern":"[url:value = 'http://5.182.210.174/b2904e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c456ee45-7624-2a98-6cae-0000c0d220e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ea8c29","pattern":"[url:value = 'http://5.182.210.174/ea8c29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d28234-23a3-53e2-8999-0000b67c41f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21dbf2","pattern":"[url:value = 'http://5.182.210.174/21dbf2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7000507f-199f-bd60-57c9-0000116037e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5bf116","pattern":"[url:value = 'http://5.182.210.174/5bf116']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e37b85f-70d0-b7a4-e68b-00000737ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/135481","pattern":"[url:value = 'http://5.182.210.174/135481']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13baf4d-2473-93f0-5293-000014a0128e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9cd6a1","pattern":"[url:value = 'http://5.182.210.174/9cd6a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f9836d-27a2-66c2-5fc6-000060b69c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8efbc","pattern":"[url:value = 'http://5.182.210.174/b8efbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--367a904d-0da2-376e-63ab-00004da54933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1a0da","pattern":"[url:value = 'http://5.182.210.174/a1a0da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a96db6-58a5-ea7f-fc75-00004afcc9a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/25a617","pattern":"[url:value = 'http://5.182.210.174/25a617']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13adc1d5-e20e-6635-fad6-000005b28b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6c8dfb","pattern":"[url:value = 'http://5.182.210.174/6c8dfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8250f9-d465-b518-4e6d-0000f76eb245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0ab716","pattern":"[url:value = 'http://5.182.210.174/0ab716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39687462-59df-3759-8812-0000b71f0f41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2be985","pattern":"[url:value = 'http://5.182.210.174/2be985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d0015f-df3e-e029-5792-00000c5ecf57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/84d632","pattern":"[url:value = 'http://5.182.210.174/84d632']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23c5c3-7e60-a4dd-c388-000073753f45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4fcda","pattern":"[url:value = 'http://5.182.210.174/b4fcda']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4564aa0c-5e76-6480-f906-0000e35b4dad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b02922","pattern":"[url:value = 'http://5.182.210.174/b02922']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab1a288-7785-f87f-d08f-00003b0752fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f76130","pattern":"[url:value = 'http://5.182.210.174/f76130']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622812b4-145b-3bd3-61e3-00007b60cb29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4f3e29","pattern":"[url:value = 'http://5.182.210.174/4f3e29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adca97b3-8a25-f696-cb38-000076df3239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b67bf0","pattern":"[url:value = 'http://5.182.210.174/b67bf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c6c5e6-b969-795e-028f-00009d93ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/72ab73","pattern":"[url:value = 'http://5.182.210.174/72ab73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e89c3af4-b622-4a3d-e82d-00009aab9f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/662744","pattern":"[url:value = 'http://5.182.210.174/662744']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797719c1-c8df-73c7-cca8-0000317af427","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f17409","pattern":"[url:value = 'http://5.182.210.174/f17409']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5eb0c-b54b-236f-d34a-00009086801a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21eb07","pattern":"[url:value = 'http://5.182.210.174/21eb07']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defb9db1-6eae-3301-fa29-0000de6a0e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a10960","pattern":"[url:value = 'http://5.182.210.174/a10960']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa64b86-cfb0-77a2-131c-00003df6b230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dd08c4","pattern":"[url:value = 'http://5.182.210.174/dd08c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66b624-e24e-3cc7-5fca-0000dd7c66be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/520230","pattern":"[url:value = 'http://5.182.210.174/520230']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a95298b3-b30d-2552-3eb8-00000f933584","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bf4fde","pattern":"[url:value = 'http://5.182.210.174/bf4fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--121d0c30-3d31-7270-3872-00001fae83f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d70921","pattern":"[url:value = 'http://5.182.210.174/d70921']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1c05c3-9190-652e-f027-00000ee9c502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f9e3f4","pattern":"[url:value = 'http://5.182.210.174/f9e3f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0a5f00-6902-f223-0684-00002980ed90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d67e2e","pattern":"[url:value = 'http://5.182.210.174/d67e2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acc2112b-68cb-bbf3-0ae5-0000e6dd6c8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e41ded","pattern":"[url:value = 'http://5.182.210.174/e41ded']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f83bb8-fa36-556e-30b1-0000b0ef7f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kal64","pattern":"[url:value = 'http://194.59.30.63:56439/b/kal64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d60a54-e37a-13f2-b9ba-00000a9c5c1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/linux","pattern":"[url:value = 'http://194.59.30.63:56439/b/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e6c556-0d87-07ae-7fce-000063a37399","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kswpad","pattern":"[url:value = 'http://194.59.30.63:56439/b/kswpad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8dcd19-6662-ffa6-2807-00000adc8ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/amd64","pattern":"[url:value = 'http://194.59.30.63:56439/b/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f9d92-da5a-68cb-84ac-00005eb1c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.116.131:52454/bin.sh","pattern":"[url:value = 'http://113.239.116.131:52454/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4887b716-aa06-d7a1-ff4f-00003485b4d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.189.106:45073/i","pattern":"[url:value = 'http://112.248.189.106:45073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d031a72-6c57-1944-fb0b-00008a2752cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/i","pattern":"[url:value = 'http://203.101.187.14:53741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873fa158-c62a-9354-afb4-000097a39ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/bin.sh","pattern":"[url:value = 'http://42.177.182.116:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89e5662-0838-43e7-00cc-000044731ed9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/bin.sh","pattern":"[url:value = 'http://193.163.187.73:41788/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1c3dfe-f736-bae0-7d47-000035c50f5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/bin.sh","pattern":"[url:value = 'http://42.228.221.46:33013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59009cb7-b04f-ccf5-99c7-0000e9936874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/i","pattern":"[url:value = 'http://193.163.187.73:41788/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd2b8cc-2b45-fa1f-10b7-00002802bd5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/bin.sh","pattern":"[url:value = 'http://113.239.64.220:36469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0449540a-b7c1-f824-9e10-00002836a118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/bin.sh","pattern":"[url:value = 'http://61.163.131.68:44551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e67d7846-d5e9-f77d-f2c3-000049334a45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/i","pattern":"[url:value = 'http://42.5.254.164:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a310a211-4bd0-f44c-a241-000068144245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.245.39.127:54225/i","pattern":"[url:value = 'http://43.245.39.127:54225/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defbd05f-12ff-fa44-3915-000038c1c276","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/i","pattern":"[url:value = 'http://175.107.210.253:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b133e6-d2f7-82c8-b532-000011140fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/i","pattern":"[url:value = 'http://223.108.82.26:33999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1c5a05-f080-de6c-7947-0000a6e86e4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/bin.sh","pattern":"[url:value = 'http://223.108.82.26:33999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--206caeb4-a363-4320-a7ac-000042a1af56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/bin.sh","pattern":"[url:value = 'http://42.231.79.131:52303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ed1af2-caca-3252-3432-00002ca08617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/bin.sh","pattern":"[url:value = 'http://27.202.245.161:52186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428ec8d4-ba49-3731-b610-000077d52b61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/bin.sh","pattern":"[url:value = 'http://203.101.187.14:53741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf36bcaa-9fed-ede0-ecf2-0000a753e98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/i","pattern":"[url:value = 'http://42.7.217.91:35797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52980d96-9eb2-5ae4-b0df-00004692e485","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/bin.sh","pattern":"[url:value = 'http://196.190.105.170:51134/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53293a6d-a3b5-090d-64f5-0000d3625b9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/i","pattern":"[url:value = 'http://45.194.25.221:57073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abae2a79-26a8-d5aa-2d21-0000f153541d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.35.84:54017/i","pattern":"[url:value = 'http://182.113.35.84:54017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--590591e9-744d-090c-7f60-00004a75e10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/i","pattern":"[url:value = 'http://42.228.221.46:33013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f382e49e-a8db-470c-c381-00003a5f0443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://181.79.85.69:11861/i","pattern":"[url:value = 'http://181.79.85.69:11861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80afcfc1-f469-d4d6-9d6b-00006e10cca1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.83.137:53442/i","pattern":"[url:value = 'http://175.151.83.137:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c54898-17fe-e23c-d0c6-0000d4d85f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/i","pattern":"[url:value = 'http://222.142.73.193:41053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856a874a-8cbc-448f-f53e-000050decbf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.83.137:53442/bin.sh","pattern":"[url:value = 'http://175.151.83.137:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75dea581-51be-54e9-e4cb-0000a69a8313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/bin.sh","pattern":"[url:value = 'http://222.142.73.193:41053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddeede8-1ff1-b722-7c53-0000d93cb6f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.82.47:47055/i","pattern":"[url:value = 'http://123.14.82.47:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--599c963b-3856-70a2-f484-000002eabd75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/i","pattern":"[url:value = 'http://163.142.92.235:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2cb1a0-d107-a69f-e324-0000e208eb78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.255.43.126:35671/i","pattern":"[url:value = 'http://58.255.43.126:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b7efd8-9ab9-6551-757a-0000fb0fe8a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.34.181:57854/i","pattern":"[url:value = 'http://182.113.34.181:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee3f324-4868-414b-b3af-0000cda0aa00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/i","pattern":"[url:value = 'http://125.44.39.164:59869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afa8c50-25d7-90fe-9718-00005294a721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.201.118:34655/i","pattern":"[url:value = 'http://182.126.201.118:34655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37fddcf0-e7c0-3920-79ac-0000af3332fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.246.199:52106/i","pattern":"[url:value = 'http://125.47.246.199:52106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3450facd-b6dd-230b-0ac5-0000e839184a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/i","pattern":"[url:value = 'http://87.68.238.27:33808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77160c23-605d-2edf-03cc-0000961c473d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/bin.sh","pattern":"[url:value = 'http://223.151.74.246:42753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64800c77-ee9b-70d3-f6e5-0000e4c5f733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/i","pattern":"[url:value = 'http://223.151.74.246:42753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7abe36-0a46-5c09-6535-00001e06c784","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.18.142:43500/i","pattern":"[url:value = 'http://42.54.18.142:43500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a71e8dd-c284-fe60-d767-0000c082dbe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.115.33.201:51030/i","pattern":"[url:value = 'http://119.115.33.201:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe42a165-9964-4eee-4e57-000095a4e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/bin.sh","pattern":"[url:value = 'http://60.162.38.51:34372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7db132e-2180-b811-74a2-0000b64b646d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.59.14.119:49412/i","pattern":"[url:value = 'http://125.59.14.119:49412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5726c75d-66d3-a094-e856-0000c6a43c6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.8.190:54830/i","pattern":"[url:value = 'http://42.5.8.190:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fd3a4b-cb88-9f6a-9059-00006e1c77c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/i","pattern":"[url:value = 'http://222.137.147.215:41949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692c3356-9ab6-b0bb-2a13-00005af41e16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/i","pattern":"[url:value = 'http://125.43.20.178:46432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bf6185-73aa-e6d4-e4a2-000034b06858","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/i","pattern":"[url:value = 'http://174.105.154.212:55690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743cfeda-dcf1-ea41-3614-0000d1384588","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.239.148.213:46343/i","pattern":"[url:value = 'http://121.239.148.213:46343/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46baa00-b4dd-c578-61cf-00007afea9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/i","pattern":"[url:value = 'http://115.49.24.80:42107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91e61a0-87b8-6699-1894-0000abe77fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.144.192:55986/i","pattern":"[url:value = 'http://124.94.144.192:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d806ea-827d-54ae-9992-00008e51edcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/bin.sh","pattern":"[url:value = 'http://223.105.50.190:35667/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab0b6c8-ad41-3dfc-2b26-00001234386e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/i","pattern":"[url:value = 'http://223.105.50.190:35667/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95e3d89-661b-3e11-8851-0000fca95155","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/bin.sh","pattern":"[url:value = 'http://87.68.238.27:33808/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7900221-13cc-6663-6927-00000fc09868","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://47.129.178.214:8092/app_JnCFbH.webp","pattern":"[url:value = 'http://47.129.178.214:8092/app_JnCFbH.webp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e23de4-af2e-cc9f-e72c-00007e71f6c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/15c864","pattern":"[url:value = 'http://5.182.210.174/15c864']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e5894a-880a-c9e6-b4cf-0000b35a784e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/30494a","pattern":"[url:value = 'http://5.182.210.174/30494a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4fc726-8c93-df55-e8f8-0000aa6e626a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14e7a4","pattern":"[url:value = 'http://5.182.210.174/14e7a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833965cd-fb62-093e-50fa-00002a8e57d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e70ebc","pattern":"[url:value = 'http://5.182.210.174/e70ebc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4379ee0-3452-a82a-34d5-00000aeb9731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/751d98","pattern":"[url:value = 'http://5.182.210.174/751d98']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62e7201-e839-2c6c-10c0-0000346b39f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1cddd2","pattern":"[url:value = 'http://5.182.210.174/1cddd2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a17875d-0671-b4ae-185f-00006703735c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0d9f5f","pattern":"[url:value = 'http://5.182.210.174/0d9f5f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de197f39-7a51-f560-0ab9-000013005696","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50b2c0","pattern":"[url:value = 'http://5.182.210.174/50b2c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f165faa-8ab3-53b5-5049-0000e96e699d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06f787","pattern":"[url:value = 'http://5.182.210.174/06f787']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e11659c-2d4d-3847-f2bf-00007245bb14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e47e49","pattern":"[url:value = 'http://5.182.210.174/e47e49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4fce15-16ce-8da0-9c72-00005d8182c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c08b5a","pattern":"[url:value = 'http://5.182.210.174/c08b5a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65e9bd-99f3-f48c-96b2-00008b94f580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/889136","pattern":"[url:value = 'http://5.182.210.174/889136']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e63c573-0ff3-1ba6-8184-0000c0f78000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/373541","pattern":"[url:value = 'http://5.182.210.174/373541']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91b300b-89e3-7149-456d-0000ad0055f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/449188","pattern":"[url:value = 'http://5.182.210.174/449188']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a63e3-b40f-49cb-c7eb-0000870bbba2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/074635","pattern":"[url:value = 'http://5.182.210.174/074635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b091518-81a5-aaeb-aee6-0000a82ae98d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7fbafd","pattern":"[url:value = 'http://5.182.210.174/7fbafd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d043bb19-0df1-f20e-e4f3-00000f65bad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f46a9e","pattern":"[url:value = 'http://5.182.210.174/f46a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6270bf-3a3c-c06d-7c32-0000b6f7854d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/106fe5","pattern":"[url:value = 'http://5.182.210.174/106fe5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1deac-a22f-e7da-9a51-0000eca2dbf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ccdef","pattern":"[url:value = 'http://5.182.210.174/6ccdef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57b2405-6596-f866-03db-0000c482cee2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/119bdc","pattern":"[url:value = 'http://5.182.210.174/119bdc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b601561c-18f3-5830-e31d-00007aacd548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/455b2c","pattern":"[url:value = 'http://5.182.210.174/455b2c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66191923-b9be-c0f1-46c6-00003116bca9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a923d","pattern":"[url:value = 'http://5.182.210.174/9a923d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e9e068-e586-77f6-3b69-0000351a7690","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e489b0","pattern":"[url:value = 'http://5.182.210.174/e489b0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a557d3-ee12-5b45-7e99-000028ff5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae2072","pattern":"[url:value = 'http://5.182.210.174/ae2072']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf63734-7579-e421-42a2-000013cdffc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/feb455","pattern":"[url:value = 'http://5.182.210.174/feb455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856b027a-2e26-eb29-6a03-0000454672ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/452bff","pattern":"[url:value = 'http://5.182.210.174/452bff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca73590-72aa-cd56-f633-0000e3e6094f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bea3b","pattern":"[url:value = 'http://5.182.210.174/8bea3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc4f70e-1f61-3c97-23a3-0000391c199c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8c04f2","pattern":"[url:value = 'http://5.182.210.174/8c04f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac3da84-2dcd-101d-51cd-00006bf04817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0dfd70","pattern":"[url:value = 'http://5.182.210.174/0dfd70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d529406b-70d7-9f1a-391b-0000023fb6d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c915c0","pattern":"[url:value = 'http://5.182.210.174/c915c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd3bd5e-dcc3-93a8-ac13-0000dce51513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/330a6e","pattern":"[url:value = 'http://5.182.210.174/330a6e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b1e981-1e53-ae00-348f-0000275bff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44973f","pattern":"[url:value = 'http://5.182.210.174/44973f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10b098f-e175-5837-13b8-0000580f7b33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bb74f6","pattern":"[url:value = 'http://5.182.210.174/bb74f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17e831-7734-5c59-c426-0000c4ab36d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14515c","pattern":"[url:value = 'http://5.182.210.174/14515c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb2670a-ee94-e9ce-0d61-0000f632ef57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07c643","pattern":"[url:value = 'http://5.182.210.174/07c643']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90044347-92fb-0b60-8d85-00005d9a06a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8d34d4","pattern":"[url:value = 'http://5.182.210.174/8d34d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f820d6-0838-3fbf-5ee9-00005b905296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-03.cfd/dollar.exe","pattern":"[url:value = 'https://mon-blanc-03.cfd/dollar.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8f0e13-8486-670e-59ab-00000992eb05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/aa/Setup.rar","pattern":"[url:value = 'https://winds11.site/aa/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ab999a-12d3-3066-e8aa-0000e57533bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bulkdevices.com/blog/Chrome.exe","pattern":"[url:value = 'https://bulkdevices.com/blog/Chrome.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6f945d-b11a-1da7-7584-00005832cb90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/bin.sh","pattern":"[url:value = 'http://182.127.168.179:52810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64bff87-ce4f-cb7b-0809-000062262d67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/bin.sh","pattern":"[url:value = 'http://123.5.171.102:41517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c01e27-0ffe-87a1-6ff2-00008651e8fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.251.27:57017/i","pattern":"[url:value = 'http://182.113.251.27:57017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b95483-9175-bc6c-1010-00007b6f737f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.13.235.11:35751/i","pattern":"[url:value = 'http://221.13.235.11:35751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb1e674-ba69-28bf-b010-000013cc527c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/i","pattern":"[url:value = 'http://123.5.171.102:41517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44da670e-78f2-0eb4-6ada-0000b252ae4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1","pattern":"[url:value = 'http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a424ecd-6c72-3530-dfd7-00009b2902f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/bin.sh","pattern":"[url:value = 'http://61.53.123.190:47054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b47077-e6ca-d2dd-d5d1-000046fb35ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043346.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043346.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8acb9b-0bb8-91a9-1ecb-0000205376bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/MSI_PRO.png","pattern":"[url:value = 'https://deliverymailreport.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca5908a-e165-b821-7605-0000cf290609","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043509.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043509.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80688b95-ecbe-eeb8-94a9-000094b097df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003940.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003940.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b24f00-2599-668f-475a-0000a6f8c4c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003735.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003735.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be20655f-e70e-c515-f445-0000b07293b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043051.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043051.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0335ca-a001-7e9f-3dd4-00005376c53e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/i","pattern":"[url:value = 'http://182.127.168.179:52810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5783a4-a4d3-3ed7-2dd4-0000cfa6bfd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/i","pattern":"[url:value = 'http://61.53.123.190:47054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad32b88-bdb5-82dd-7e84-000072fa71eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/bin.sh","pattern":"[url:value = 'http://113.231.225.170:59950/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e7bc62-deea-75f2-c4ae-0000c93bcc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.42.30.58:48392/i","pattern":"[url:value = 'http://125.42.30.58:48392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb190eb7-9b8b-ef9e-f934-0000ce8f289e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/i","pattern":"[url:value = 'http://113.231.225.170:59950/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4efacf1-68d7-7f43-52b7-0000727750f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.102.201:45262/bin.sh","pattern":"[url:value = 'http://42.177.102.201:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feaca9e6-60c8-392f-741a-0000f9bc0121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/img/stego_anepqnd5rj.png","pattern":"[url:value = 'https://coconutoficial.com.br/img/stego_anepqnd5rj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b16fa1-dea7-7b89-acf1-000072cf86aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/softbot.mips","pattern":"[url:value = 'http://91.92.47.97/softbot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8503f98-2648-71ec-b33c-000034c3d796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cba6a7d-8d39-9983-995a-00001cf9674e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_shot.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_shot.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08a2be6-aec8-e366-5a3e-000022047e2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_BB.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_BB.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c49b8-5de4-d25f-bf8d-0000e739c142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_rabit.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_rabit.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf5497a-8eaf-aff2-79d3-0000417c5acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/x1.png","pattern":"[url:value = 'https://eccmice.com/dot/x1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2c1a29-5da0-faf4-6f72-0000411faee6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a1.png","pattern":"[url:value = 'https://eccmice.com/dot/a1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588c60f9-c7e9-ab81-7ba5-0000cf90a905","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a2.png","pattern":"[url:value = 'https://eccmice.com/dot/a2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682afefc-ddae-fb19-35cf-0000192cca97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/nd7.png","pattern":"[url:value = 'https://eccmice.com/dot/nd7.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175d6f49-9dd6-bf00-a8c2-00007c82a9d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mb.png","pattern":"[url:value = 'https://eccmice.com/dot/mb.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef342c64-55c3-8983-63b9-0000a32db9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mk4.png","pattern":"[url:value = 'https://eccmice.com/dot/mk4.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7aa8fc-8794-c357-2743-00009ea66137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/n1.png","pattern":"[url:value = 'https://eccmice.com/dot/n1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8837563-1703-bd6b-4d8d-0000981e6f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://munihuacho.gob.pe/imagenes2/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/imagenes2/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2abf54-c369-d24f-9790-00002725b8ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.252.216.68:38543/i","pattern":"[url:value = 'http://180.252.216.68:38543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e0b01e-f510-0a5f-5e5a-0000a60187c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/bin.sh","pattern":"[url:value = 'http://175.146.117.140:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3c1e3-f171-3bce-a89b-0000a9876e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/bin.sh","pattern":"[url:value = 'http://123.11.180.8:45505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbfcebfb-c624-dfcb-1fe0-000044664d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.85.188:32874/i","pattern":"[url:value = 'http://175.165.85.188:32874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7856fe70-d5dc-b1d1-24d5-0000a8b01574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10819ff1-d211-48cf-61d1-00002c16793a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.34/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ad4be4-8f74-5f65-abff-0000e1777468","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e29973-29ba-2179-5d23-00004c4621c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f29821-6641-654c-4618-000027d2fa6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.41/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6fa811-38a0-3d73-ffe8-00005241c64b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.208:50797/i","pattern":"[url:value = 'http://222.140.183.208:50797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8a3d10-576d-e5a5-1a71-00008fd5c4f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.38/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a890cd7-68bc-79fa-db5a-0000446112a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a18ec4-a450-03a2-a08f-000066015d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.111/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b6fae7b-d934-5fe8-0c2a-0000415b2fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aec9e0b-bc67-fe9b-48fc-0000be5da3c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.24.21.177:55825/i","pattern":"[url:value = 'http://36.24.21.177:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b85e9e-ab30-6751-1a0d-0000e2799bf2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/i","pattern":"[url:value = 'http://123.11.180.8:45505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5dcee-0339-63aa-9fe9-0000aae7246b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.240/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b00ad1-4533-2308-5aca-000049b341ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83464df-2a39-f3cb-3772-000052866d4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106794d5-492c-113f-58a3-0000b9cf0980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm6","pattern":"[url:value = 'http://176.65.139.139/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb118ff3-f9cf-9249-faed-0000955f2caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.178.111:42241/i","pattern":"[url:value = 'http://182.127.178.111:42241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fcc6ae8-dfa4-d553-6799-00005e47c98f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86_64","pattern":"[url:value = 'http://176.65.139.139/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff348a29-ea65-0e6b-b019-00002332bc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/m68k","pattern":"[url:value = 'http://176.65.139.139/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a8c711-7f11-14e5-7033-0000b524e6c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/spc","pattern":"[url:value = 'http://176.65.139.139/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575c4886-4617-d0a4-e109-00004bb3fa19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86","pattern":"[url:value = 'http://176.65.139.139/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fbc9b1f-5b63-13ae-ec5c-0000b36e0d9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/sh4","pattern":"[url:value = 'http://176.65.139.139/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6760a443-27e0-e724-a329-000001736ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm7","pattern":"[url:value = 'http://176.65.139.139/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57fe8281-e985-51ef-71df-00004731119c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/persist.arm7","pattern":"[url:value = 'http://176.65.139.139/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b318beff-254d-0724-e73e-000023c46a90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mips","pattern":"[url:value = 'http://176.65.139.139/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ca7836-d823-fd41-27a7-000048c704da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mpsl","pattern":"[url:value = 'http://176.65.139.139/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aee7948-130e-63a7-e93d-000033b0946c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/ppc","pattern":"[url:value = 'http://176.65.139.139/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--658c3037-4814-441b-3762-0000ee1a4f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/i686","pattern":"[url:value = 'http://176.65.139.139/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20db185d-160c-8790-3bfc-000003086b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/i","pattern":"[url:value = 'http://175.146.117.140:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35026b4b-bff0-d64b-ecbd-0000e0bef4fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.77.45:59612/i","pattern":"[url:value = 'http://182.117.77.45:59612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef59a81b-5f64-9ac8-e4d1-0000906cd661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/i","pattern":"[url:value = 'http://219.155.81.115:40911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bf79e53-44b6-ae75-14a2-000056971507","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/i","pattern":"[url:value = 'http://27.213.115.26:45049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b287f2d6-7b36-01ff-7619-000028249922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/i","pattern":"[url:value = 'http://61.52.62.249:60152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8066bec-b9c4-96c6-710e-00003be47bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/i","pattern":"[url:value = 'http://182.113.40.115:55056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91afe0ef-53f9-5012-aa30-00004edf9f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/bin.sh","pattern":"[url:value = 'http://174.105.154.212:55690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d92d717-f20d-858c-a364-00003d6751e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/i","pattern":"[url:value = 'http://42.239.76.28:33921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19a555f-21d0-798f-4d98-00004480ff99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.68.198:56133/i","pattern":"[url:value = 'http://113.230.68.198:56133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679cac18-b806-d2c8-32cd-00001d489b8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/bin.sh","pattern":"[url:value = 'http://42.231.184.120:39468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb4a835-7534-09e1-87ce-00007c04234e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/bin.sh","pattern":"[url:value = 'http://36.70.235.87:40268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac4b680-e09e-baed-f6fc-00003bd55143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/i","pattern":"[url:value = 'http://42.231.184.120:39468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30172bdf-0e29-6897-b0c4-000087004f3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/bin.sh","pattern":"[url:value = 'http://112.248.105.21:52064/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e139e2cf-2f91-ac2e-36eb-00005dc88d54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/bin.sh","pattern":"[url:value = 'http://42.226.211.193:43686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b751c9-45c8-f8ef-f926-00009cada25d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/bin.sh","pattern":"[url:value = 'http://42.59.235.202:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39db7bd-f2eb-ac4a-90a7-00001ccaffd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.234.164:44742/bin.sh","pattern":"[url:value = 'http://42.59.234.164:44742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78154df2-55fa-b1a5-ec27-00006a3c37cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/i","pattern":"[url:value = 'http://112.248.105.21:52064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aec8be9-a425-1318-7895-0000238e4148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.135:58810/i","pattern":"[url:value = 'http://115.48.144.135:58810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d08983-0528-ab10-9fe6-00007b971103","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/i","pattern":"[url:value = 'http://42.226.211.193:43686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e257f1-4f17-486e-59cb-0000fb8e14ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/bin.sh","pattern":"[url:value = 'http://61.137.206.166:45619/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80dceb15-3a98-cae0-190d-0000dc74906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.219.119.136:59026/i","pattern":"[url:value = 'http://27.219.119.136:59026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e180b2-7864-7e7b-2991-0000de222510","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/bin.sh","pattern":"[url:value = 'http://115.50.82.162:60042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbceed64-447a-1bc5-8688-00002ca444bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/bin.sh","pattern":"[url:value = 'http://221.15.214.165:40665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f12a42f-99ae-3ff4-4d20-0000feb54c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/bin.sh","pattern":"[url:value = 'http://182.116.21.39:52171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89fde310-5e17-2742-9787-00005e0fc8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/i","pattern":"[url:value = 'http://115.50.82.162:60042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c9836b-574a-5a78-49d2-000042e2d076","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/i","pattern":"[url:value = 'http://182.116.21.39:52171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e147108-7d82-4c57-68d9-0000d69b8892","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.232.254.209:49853/i","pattern":"[url:value = 'http://113.232.254.209:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81411f01-4081-5939-d688-000039355080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/bin.sh","pattern":"[url:value = 'http://123.11.14.253:33653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceac35c9-d608-dccc-625f-00001759c5da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.161.237:35487/i","pattern":"[url:value = 'http://115.55.161.237:35487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6e6cd8-730f-1fc0-8239-000014ae4969","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.235.135:48342/i","pattern":"[url:value = 'http://222.138.235.135:48342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8ae20b-8fc4-64d1-ea40-000099065150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/bin.sh","pattern":"[url:value = 'http://115.52.242.168:48270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd9ea6ce-2245-07c1-ab53-000080ad5b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/bin.sh","pattern":"[url:value = 'http://182.123.210.95:52102/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef675fb0-48b4-30b6-9770-0000dfdd0e31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/i","pattern":"[url:value = 'http://123.11.14.253:33653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886f245e-3ccc-2568-0db0-0000beb1dbf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.243.95.50:59704/i","pattern":"[url:value = 'http://222.243.95.50:59704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad95afd-fd98-70cf-54d7-0000f6317ad9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/i","pattern":"[url:value = 'http://222.140.183.70:34777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c92a64e-b238-a113-cf7f-0000682e0c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/bin.sh","pattern":"[url:value = 'http://66.212.173.225:52589/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2b54e0-839b-77ca-44c6-00002ffff461","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/bin.sh","pattern":"[url:value = 'http://115.48.149.175:36753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558aada6-deb6-2879-55a2-00003f47ccb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/i","pattern":"[url:value = 'http://182.123.210.95:52102/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f760093-ae45-882d-bf9b-0000b2459761","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.64.135.181:55489/i","pattern":"[url:value = 'http://217.64.135.181:55489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c15ce1d-3ef9-a20b-0180-0000d82c6bfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.3.74:35880/i","pattern":"[url:value = 'http://182.113.3.74:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979aae84-bc3e-86b7-12be-000032141d58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/bin.sh","pattern":"[url:value = 'http://182.117.86.246:45059/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4ab492-b229-2db2-1de6-00001c41ea4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/i","pattern":"[url:value = 'http://182.117.86.246:45059/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9dcc82-f288-3c71-4489-0000ff36fd57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/bin.sh","pattern":"[url:value = 'http://42.235.82.252:57371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bddb2b11-9ca5-17c7-1ac7-00008ee37a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/i","pattern":"[url:value = 'http://66.212.173.225:52589/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c849a545-4f43-be2e-0276-00005e57bbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/bin.sh","pattern":"[url:value = 'http://175.165.142.110:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0285a178-b37b-037f-2ee2-0000845a8643","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/i","pattern":"[url:value = 'http://115.48.149.175:36753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c0372f-24db-6f92-188c-0000cc04265f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/i","pattern":"[url:value = 'http://115.52.242.168:48270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b9cab4-3057-832d-e8c4-0000b589274d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/i","pattern":"[url:value = 'http://61.53.75.99:58786/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c4f819-865b-17ba-371a-0000a7edb075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.179.142:50106/i","pattern":"[url:value = 'http://42.232.179.142:50106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d31d7c-7bb0-5ba9-28bb-0000492b3bef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/i","pattern":"[url:value = 'http://175.165.142.110:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49e5a95-8776-bcc9-1f6f-0000584d34dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/i","pattern":"[url:value = 'http://42.235.82.252:57371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec5af8d-bab5-e680-e8e5-0000df0a5bea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/bin.sh","pattern":"[url:value = 'http://61.52.62.249:60152/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce23c9c-e1a6-99c8-2d5b-00003d88fe8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.120.1.2:48934/i","pattern":"[url:value = 'http://182.120.1.2:48934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c26f40-e200-c41d-d906-000013e31ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/bin.sh","pattern":"[url:value = 'http://182.117.0.179:35408/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e950b7-117a-a9b3-93f0-0000570aaa90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.182.112:48863/i","pattern":"[url:value = 'http://222.140.182.112:48863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd34384b-6b9d-4372-880c-0000be926f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/bin.sh","pattern":"[url:value = 'http://61.137.198.130:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73b7abc-c658-3722-5c09-00005ce93a75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/bin.sh","pattern":"[url:value = 'http://119.189.172.160:60627/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323486f6-2edd-699e-32cf-000009528186","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/i","pattern":"[url:value = 'http://182.117.0.179:35408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9158c8c9-4821-594e-7360-00000c9b6c70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/bin.sh","pattern":"[url:value = 'http://222.137.174.198:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea8e2a6-4a77-f179-0fa4-00009dc6de06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/bin.sh","pattern":"[url:value = 'http://45.194.25.221:57073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06211192-46f4-45cc-b121-000015511a78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.67.25:54765/i","pattern":"[url:value = 'http://119.115.67.25:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fe272f-1e80-cbf9-2d33-000047a72994","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/i","pattern":"[url:value = 'http://119.189.172.160:60627/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--708b76cc-b9db-ddc5-d099-00006fccae22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/bin.sh","pattern":"[url:value = 'http://42.85.209.65:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46333829-fab2-e3a9-64bd-00006ba5e56a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/bin.sh","pattern":"[url:value = 'http://125.43.20.178:46432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--005811fc-e3d0-3361-e79b-00007ec135cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/i","pattern":"[url:value = 'http://222.137.174.198:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01a33ccb-3d69-7520-2c8b-000055a0b7a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/i","pattern":"[url:value = 'http://42.85.209.65:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e330b79-841e-9f08-544f-0000f372aef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/bin.sh","pattern":"[url:value = 'http://61.53.205.255:56935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8238ced2-cc04-ef33-3983-00000700e62c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/bin.sh","pattern":"[url:value = 'http://27.213.115.26:45049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07abee6-dbfb-0925-526e-0000938ff268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/i","pattern":"[url:value = 'http://61.53.205.255:56935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91a52a-c0f4-f86c-441e-000095d46d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/bin.sh","pattern":"[url:value = 'http://115.58.88.2:47310/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a4d2ad-9535-a1f8-7128-000047634b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/bin.sh","pattern":"[url:value = 'http://185.233.94.151:57893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3519fcf8-f23a-664a-9483-000093c36182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/i","pattern":"[url:value = 'http://185.233.94.151:57893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c57f112-568b-d461-b88d-0000137c2647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/i","pattern":"[url:value = 'http://115.58.88.2:47310/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaea3e-77af-2d52-2c7a-0000237a8d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/bin.sh","pattern":"[url:value = 'http://116.138.47.10:38730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fe0ab1-9d7f-59cc-7e70-00009000e60c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.68.249.16:45432/bin.sh","pattern":"[url:value = 'http://83.68.249.16:45432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeb2fc1a-712d-55eb-1e24-000078a11fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/bin.sh","pattern":"[url:value = 'http://125.43.246.89:58052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14666f7f-6bf4-497d-5011-0000ed6fd9d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/bin.sh","pattern":"[url:value = 'http://182.117.79.50:50740/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59056232-fb30-b58c-af98-0000f43889a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/i","pattern":"[url:value = 'http://115.51.35.175:41863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e6e804-d126-fd61-7ad0-00002cb1d308","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/i","pattern":"[url:value = 'http://61.243.238.134:46379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34692ed9-b87d-5200-dc90-000049479bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/i","pattern":"[url:value = 'http://125.43.246.89:58052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5753ca00-b3dd-e6c6-f5cb-000037017a73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/i","pattern":"[url:value = 'http://182.117.79.50:50740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92cf9b73-de73-4741-fe1d-00003baf1fc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.121:52162/bin.sh","pattern":"[url:value = 'http://125.40.3.121:52162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b276c5da-d8c6-44db-a9a5-00007b8302f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.3.121:52162/i","pattern":"[url:value = 'http://125.40.3.121:52162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1d0200-9c39-2d79-bf04-0000a5464b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/bin.sh","pattern":"[url:value = 'http://182.116.23.190:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fcafb2-d720-c286-321a-0000af387147","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/i","pattern":"[url:value = 'http://175.175.210.205:34753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bde355-931e-7fb0-8e62-00005e82c6af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/bin.sh","pattern":"[url:value = 'http://101.29.22.214:59328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fc6841-2178-d35d-3f0f-00009c01fd82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/i","pattern":"[url:value = 'http://182.116.23.190:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5889bc80-4937-deda-2298-0000c9578446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.247.47:34358/i","pattern":"[url:value = 'http://115.55.247.47:34358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c76d5d74-71cb-5a38-f0d4-00009b98bb19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/bin.sh","pattern":"[url:value = 'http://123.11.10.210:60891/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d762127-69c9-4f2c-ed26-0000fc8dd41c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/i","pattern":"[url:value = 'http://123.11.10.210:60891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb392c7-593e-a5f0-5db2-00007189cf9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/i","pattern":"[url:value = 'http://101.29.22.214:59328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079dbc3-2b13-0d21-75c7-00002c8ab8bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/bin.sh","pattern":"[url:value = 'http://61.53.75.99:58786/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec7e1ab-180e-06f8-70b8-0000633e625f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/bin.sh","pattern":"[url:value = 'http://113.239.223.142:55389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3794bfa-520c-da7e-033f-00007671ec3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/bin.sh","pattern":"[url:value = 'http://221.15.22.1:46570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daeb5cac-64b0-cba5-f2b7-000005c2c8d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/i","pattern":"[url:value = 'http://116.138.47.10:38730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71253e4b-62e7-0681-c685-00008278e8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/i","pattern":"[url:value = 'http://175.150.176.248:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2acc9a02-623e-dc64-fa2f-0000ee8e7de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/bin.sh","pattern":"[url:value = 'http://123.12.234.38:40280/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e436f9-59c7-da27-e0a8-00006018ba4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/i","pattern":"[url:value = 'http://113.239.223.142:55389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd5d43a-cf20-7ddc-fb57-0000ce670334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/bin.sh","pattern":"[url:value = 'http://27.215.124.221:49908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6b6dd7-69ac-be8b-79e8-00007683cb2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/i","pattern":"[url:value = 'http://221.15.22.1:46570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95df042a-9976-aa0a-fb44-0000b3ac8c4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/bin.sh","pattern":"[url:value = 'http://125.41.228.121:39428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13ba32e-bc31-28ff-511b-0000f28428fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/i","pattern":"[url:value = 'http://123.4.233.107:35672/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c84565b-a240-5b95-cc06-000092ab3968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/bin.sh","pattern":"[url:value = 'http://122.139.14.243:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010bd8d7-4265-d624-0cd4-0000a283f085","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/bin.sh","pattern":"[url:value = 'http://42.224.49.156:55210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b5da19-b36a-6391-f697-0000275db777","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/i","pattern":"[url:value = 'http://125.41.228.121:39428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3212e7e-f93f-fcf7-04c5-0000ed771935","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/bin.sh","pattern":"[url:value = 'http://61.54.190.223:33351/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3908670-0e1f-5006-448a-00003d518184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/bin.sh","pattern":"[url:value = 'http://182.112.242.199:48848/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a89409-90f4-cb1d-5cd4-000036871afd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.14.177.167:35854/bin.sh","pattern":"[url:value = 'http://123.14.177.167:35854/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b9c7d74-ed6a-bd98-3065-0000c4a65d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.83.215:50416/i","pattern":"[url:value = 'http://61.53.83.215:50416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a76d3f-4d68-d62e-b23e-000043a0c434","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/bin.sh","pattern":"[url:value = 'http://125.44.39.164:59869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8f753d-e8f5-cc92-e657-0000f78a2091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/i","pattern":"[url:value = 'http://182.112.242.199:48848/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145a2e49-136d-562d-e5c4-00000b844233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/bin.sh","pattern":"[url:value = 'http://39.79.0.238:46471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70bed1d5-447a-2e27-524c-0000cbced8d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.23.122:60626/i","pattern":"[url:value = 'http://123.189.23.122:60626/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f274cc-d584-8e21-8cc4-00007423053e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.106.88:54654/bin.sh","pattern":"[url:value = 'http://112.248.106.88:54654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28703a9c-3b88-a667-010a-000075d3ab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/i","pattern":"[url:value = 'http://39.79.0.238:46471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b6bfbd7-314f-b1a3-338d-00005198e6f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.121.137.156:38226/i","pattern":"[url:value = 'http://182.121.137.156:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa600c3-1a90-8dde-fd6a-0000582a6b95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.106.88:54654/i","pattern":"[url:value = 'http://112.248.106.88:54654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2ea995-6c91-1ea4-9d02-0000acbd3506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/bin.sh","pattern":"[url:value = 'http://220.177.11.228:55723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389edd39-abab-57a9-d53d-0000fced9e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/bin.sh","pattern":"[url:value = 'http://175.175.210.205:34753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37382a53-ecfc-2c81-c6f6-0000dde5a1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/i","pattern":"[url:value = 'http://27.215.124.221:49908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd29d8d-a6c8-bce0-3866-0000b1a98a2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.213.157:48371/i","pattern":"[url:value = 'http://120.84.213.157:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7602049a-2217-7358-88fd-00008e90dcd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.20.151:35587/i","pattern":"[url:value = 'http://182.116.20.151:35587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8063a494-e411-d497-b381-000010bc1c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/i","pattern":"[url:value = 'http://42.224.49.156:55210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311bc945-5630-1d54-c0d2-0000127aaf5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/bin.sh","pattern":"[url:value = 'http://218.13.149.41:47316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8753df-9a2c-0aab-fb6b-000090e92f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/bin.sh","pattern":"[url:value = 'http://219.156.34.146:35324/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8086b90f-167c-a3d8-d10d-0000cef631f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/i","pattern":"[url:value = 'http://219.156.34.146:35324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6402797f-90ff-9ad1-0077-0000bb28c934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.219.1.198:34396/i","pattern":"[url:value = 'http://83.219.1.198:34396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64bccf0-1d57-69ce-bda6-0000c7f336e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/bin.sh","pattern":"[url:value = 'http://112.237.148.180:50714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee47e48-bacb-210c-6eb0-00009c24eb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/bin.sh","pattern":"[url:value = 'http://42.224.70.52:48398/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3bf03f-eb4d-3d8c-4d7a-00007ef6ef06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/i","pattern":"[url:value = 'http://112.237.148.180:50714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2f5ad5-cfab-cb78-984f-000094b13ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://216.196.170.32:4154/i","pattern":"[url:value = 'http://216.196.170.32:4154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3b6aef-3da6-0dc6-b20f-000078d1b8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/i","pattern":"[url:value = 'http://42.224.70.52:48398/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c864b8-8b35-4072-651a-0000ab150e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/bin.sh","pattern":"[url:value = 'http://103.160.130.109:34175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a09945-a60b-2ee2-4c41-0000f472982a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/i","pattern":"[url:value = 'http://218.13.149.41:47316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35da7771-9e2c-f1e9-6c40-0000a73d9307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.151.43.183:45405/bin.sh","pattern":"[url:value = 'http://103.151.43.183:45405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776d8fc1-f3a6-0c38-b827-0000eb0320cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.15.184.239:49837/i","pattern":"[url:value = 'http://221.15.184.239:49837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23402f3f-aadf-346d-b704-0000bf819edd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.139.42.27:42240/bin.sh","pattern":"[url:value = 'http://222.139.42.27:42240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449cf2d4-dc30-ad96-e3f2-0000a1c58456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/bin.sh","pattern":"[url:value = 'http://101.109.237.184:36403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1450a591-106b-eb49-89d7-0000b0bc8e25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.188.94.210:49613/i","pattern":"[url:value = 'http://123.188.94.210:49613/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfb615-f51a-1528-1ca3-00004a68e21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/bin.sh","pattern":"[url:value = 'http://112.198.130.112:60062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4352a78-35d0-da41-3d30-0000974c7499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/bin.sh","pattern":"[url:value = 'http://120.57.122.56:42186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b077e3e8-a637-5291-4cb9-0000e8b580b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/bin.sh","pattern":"[url:value = 'http://27.215.86.140:41217/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b091fe3-1753-cdee-d010-0000eb549d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/i","pattern":"[url:value = 'http://115.55.151.152:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f03abce8-9716-8d2b-fbd6-0000ddfbfc40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/i","pattern":"[url:value = 'http://119.117.164.177:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7198a6a5-f34c-4f0d-8233-00002d4cda4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/i","pattern":"[url:value = 'http://115.55.55.56:36789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138e8b51-4ac6-a89b-ac24-00004b7fee9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.52.184.70:36515/i","pattern":"[url:value = 'http://61.52.184.70:36515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef92222-93f4-f847-b2f9-0000ac6cdb46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.9.18:35539/i","pattern":"[url:value = 'http://123.8.9.18:35539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27aad9ba-ff5e-9695-87e7-00005a460aef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.140.187.100:34139/i","pattern":"[url:value = 'http://116.140.187.100:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6fc150-157c-e511-2e65-00009726f1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/i","pattern":"[url:value = 'http://125.40.24.46:51091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1ce441-0bd7-175f-6f2e-0000ab3dc845","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/i","pattern":"[url:value = 'http://222.141.138.63:42485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b66af5-3db4-8686-8514-0000fa696112","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/bin.sh","pattern":"[url:value = 'http://125.44.38.130:50257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d7ef28-2e8a-a0a2-3812-00000379faa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.13.74.177:44056/i","pattern":"[url:value = 'http://123.13.74.177:44056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddf7e60-59e2-b0ac-5dd5-00001b71155e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.108.84.109:50272/i","pattern":"[url:value = 'http://85.108.84.109:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8823294-71cf-418f-dd21-0000e0aae307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/i","pattern":"[url:value = 'http://113.230.30.175:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ab8362-d010-c8c5-eae1-0000ee8feb9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.77.48.16:34314/i","pattern":"[url:value = 'http://39.77.48.16:34314/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--484ea9ea-9088-f91f-f3e6-0000bea27ba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/bin.sh","pattern":"[url:value = 'http://115.57.255.1:59779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505fbdd2-d17d-ae44-d827-0000d0c43830","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/i","pattern":"[url:value = 'http://182.244.41.109:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e62fc6-87b3-bdd8-001d-00003a21d0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/bin.sh","pattern":"[url:value = 'http://113.230.30.175:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc1591e-701b-f6b8-2e1a-000065d4df64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/bin.sh","pattern":"[url:value = 'http://118.34.109.121:32776/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d84242e-2914-8f93-5184-0000dd9888b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/bin.sh","pattern":"[url:value = 'http://66.8.135.142:58566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d898c5-fbf3-5f2b-a5bf-000052824ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/i","pattern":"[url:value = 'http://118.34.109.121:32776/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e31011-4c4f-3bf4-a3dd-00009a532ddb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/bin.sh","pattern":"[url:value = 'http://175.150.176.248:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408efa2c-84ca-7dcd-d799-000021725d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/bin.sh","pattern":"[url:value = 'http://222.140.183.70:34777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eacaff-3287-bad1-8e37-00003b244550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/bin.sh","pattern":"[url:value = 'http://115.51.35.175:41863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473caa01-4578-214b-8f80-00008e33073a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/bin.sh","pattern":"[url:value = 'http://163.142.92.235:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f7d77bc-a681-d486-62e3-000076f8a025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/bin.sh","pattern":"[url:value = 'http://182.113.40.115:55056/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d2b2d3-090c-9e72-c60f-0000c597b10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/i","pattern":"[url:value = 'http://27.215.86.140:41217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3588532f-a8e9-79c2-600d-0000b59241c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.56.113.61:36360/i","pattern":"[url:value = 'http://115.56.113.61:36360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62598861-3207-ac4e-9880-00005c8e1fc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/bin.sh","pattern":"[url:value = 'http://123.4.233.107:35672/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d02579a-2696-66b6-c62f-00001f06d20a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/bin.sh","pattern":"[url:value = 'http://183.188.77.45:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad0d12f-fe7f-1943-fb46-0000d9976233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/bin.sh","pattern":"[url:value = 'http://115.49.24.80:42107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4391be-422f-a0c8-0ca3-0000bc393d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.204.195.233:38896/bin.sh","pattern":"[url:value = 'http://27.204.195.233:38896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d6c6a0-1933-3b5e-4d73-0000df1e1f03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/bin.sh","pattern":"[url:value = 'http://119.117.164.177:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab02cb7-d58c-59fd-af36-0000c6377583","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/i","pattern":"[url:value = 'http://182.112.6.161:53066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccbab57-a3b4-b0f6-30b9-0000dcc003fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/i","pattern":"[url:value = 'http://123.97.30.141:52890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7ee97-4d6c-63e0-e4bc-000099d213e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.226.31.25:56290/i","pattern":"[url:value = 'http://114.226.31.25:56290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500c892d-fa09-a664-0357-00002714ff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/bin.sh","pattern":"[url:value = 'http://125.40.24.46:51091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0116e044-3014-a47a-b0de-0000294f260e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/i","pattern":"[url:value = 'http://114.227.224.253:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c91-3ce1-289a-5bea-0000008eae78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://93.88.96.103:33908/i","pattern":"[url:value = 'http://93.88.96.103:33908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcfbdd5-e689-d1f0-7a9c-00002584bdda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/bin.sh","pattern":"[url:value = 'http://115.98.147.69:48442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495d110-8c42-8e0a-16e7-0000f01675ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.52.190.88:42242/i","pattern":"[url:value = 'http://115.52.190.88:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd72b6b-274c-d4e1-c69a-0000de33db5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.55.170:47643/i","pattern":"[url:value = 'http://42.53.55.170:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f25702-ade4-17a1-92c3-000051bbc9d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/bin.sh","pattern":"[url:value = 'http://219.155.81.115:40911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8375cda7-c65e-04b8-424f-0000767a2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/bin.sh","pattern":"[url:value = 'http://115.55.55.56:36789/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bff8e3-5899-d006-a24a-0000d869ee67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/bin.sh","pattern":"[url:value = 'http://123.97.30.141:52890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff0ab2b-f9e2-b74e-4de8-000030207b1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.49.244:41600/i","pattern":"[url:value = 'http://115.55.49.244:41600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a7cfbe-f625-c275-5dae-00003f666b09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/bin.sh","pattern":"[url:value = 'http://61.243.238.134:46379/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e5b401-a01a-6bbc-9585-0000a57d5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/i","pattern":"[url:value = 'http://103.160.130.109:34175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b815b096-49b8-5f34-a66b-000084f0cb07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/bin.sh","pattern":"[url:value = 'http://222.141.138.63:42485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd11b8-46d5-27db-72ba-0000d93206bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.57.66.51:42056/i","pattern":"[url:value = 'http://42.57.66.51:42056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92796a4d-4e55-e9b7-7fea-00003aff111a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.68.95.197:48234/i","pattern":"[url:value = 'http://103.68.95.197:48234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3173985-cdec-9014-7636-00009edf945b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.100.62:51333/i","pattern":"[url:value = 'http://42.224.100.62:51333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f35d82b-322b-a5f7-1e5e-0000df3c6704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/bin.sh","pattern":"[url:value = 'http://115.42.71.239:50213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5870d28c-6564-0e51-06c2-0000ff5271b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/i","pattern":"[url:value = 'http://115.57.255.1:59779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2507de9-3fef-425f-cf1c-0000a3bff83c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/i","pattern":"[url:value = 'http://182.113.205.36:51969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90656265-b4c2-fb83-2392-0000d079d007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/bin.sh","pattern":"[url:value = 'http://182.112.6.161:53066/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec2a6b55-b2ae-29d7-1593-0000c3b3d2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/bin.sh","pattern":"[url:value = 'http://114.227.224.253:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6408c2e0-5697-3aff-dc05-0000aa83a894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/i","pattern":"[url:value = 'http://66.8.135.142:58566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ece206-804b-a893-c7ed-0000350f0695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/bin.sh","pattern":"[url:value = 'http://42.239.76.28:33921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504243ad-857b-a42b-01c3-00006650b7b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/bin.sh","pattern":"[url:value = 'http://222.136.52.188:32973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58ea61-6e38-85f0-e771-00007c4226e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/bin.sh","pattern":"[url:value = 'http://113.229.190.135:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d247b64-2858-d0ce-7f48-00004b606283","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/i","pattern":"[url:value = 'http://125.44.38.130:50257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a2861a-e692-185d-256e-0000b0c69eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/bin.sh","pattern":"[url:value = 'http://42.225.15.213:35530/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60314a07-e018-7c2a-f9b5-0000aa71f4fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/bin.sh","pattern":"[url:value = 'http://182.113.205.36:51969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20f3568-b5a8-6e05-f02f-0000803c00f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/i","pattern":"[url:value = 'http://115.42.71.239:50213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8eb155-ea52-3c0f-9cac-000069df98c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.182:40164/i","pattern":"[url:value = 'http://27.44.145.182:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b594c8f4-5587-4972-34ff-0000b2fa940c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.223.148:58418/i","pattern":"[url:value = 'http://115.60.223.148:58418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5a5f88-cd1f-d66a-b89c-0000adcdf61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/i","pattern":"[url:value = 'http://42.230.42.7:45769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddd74290-5ccc-8937-61d4-0000d39d9773","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.6.248:33966/i","pattern":"[url:value = 'http://115.49.6.248:33966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4457ea56-d675-87c0-e15f-0000cdd9c8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/bin.sh","pattern":"[url:value = 'http://42.230.42.7:45769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a353941-5c1d-6d4d-ff31-0000dd19ebda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.47.32.24:44968/i","pattern":"[url:value = 'http://125.47.32.24:44968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78404942-ee53-b830-ed9f-0000d00fa9a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/bin.sh","pattern":"[url:value = 'http://115.55.151.152:49757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f787757-fa9c-54a8-1082-0000a3256bdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.165:53887/i","pattern":"[url:value = 'http://120.84.215.165:53887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e900c-e51a-a4bc-9383-00006b951bd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.234.246.166:55376/i","pattern":"[url:value = 'http://124.234.246.166:55376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd505ab-5306-0f55-f3a2-0000aa9525ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.1.142:60668/i","pattern":"[url:value = 'http://125.41.1.142:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1e378aa-ae0d-2708-bf97-0000fe7cdde5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/i","pattern":"[url:value = 'http://115.98.147.69:48442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0473867-eaca-1fa9-f480-000046c9f013","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/i","pattern":"[url:value = 'http://182.241.136.218:42856/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d26638-d735-8665-91ff-000085748e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/bin.sh","pattern":"[url:value = 'http://196.189.3.1:47844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf61f2e-37b7-8b4e-4320-00005f21778f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/bin.sh","pattern":"[url:value = 'http://182.241.136.218:42856/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edeec56c-c0be-12f7-a5a0-000044849b73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.224.238:59568/i","pattern":"[url:value = 'http://175.151.224.238:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51a5b19-141f-3e68-3d90-000043aca051","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/i","pattern":"[url:value = 'http://196.189.3.1:47844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--635ed0dc-cb2e-05ee-d1e2-00007d0e3075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/i","pattern":"[url:value = 'http://120.57.122.56:42186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd578ab-4f1c-1d19-fe5d-000030042296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/i","pattern":"[url:value = 'http://112.198.130.112:60062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fab88c1-8228-431a-57cb-0000d645d175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.118.161:54312/bin.sh","pattern":"[url:value = 'http://182.126.118.161:54312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91c3657-681b-ca32-1a00-00000098b008","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.0.60.188:40182/i","pattern":"[url:value = 'http://175.0.60.188:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90f2cd6-a9f5-7857-6827-0000d4fc7aaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/i","pattern":"[url:value = 'http://101.109.237.184:36403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a61f6e-8ed1-d06d-7c66-000044d0abe0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/bin.sh","pattern":"[url:value = 'http://125.45.57.136:34620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4caaf9ae-77f1-fcea-8466-0000d4ed258a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/i","pattern":"[url:value = 'http://123.12.234.38:40280/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e17734c-7e43-4abd-bf74-00000a379ea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.230.168.62:51199/i","pattern":"[url:value = 'http://77.230.168.62:51199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f647439-8e62-f844-fb6f-0000de40823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.54.95.49:35344/bin.sh","pattern":"[url:value = 'http://24.54.95.49:35344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aabdf22c-a3e0-aed1-c0fd-0000567bb68e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/i","pattern":"[url:value = 'http://125.45.57.136:34620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--171b06a0-c41b-963f-6f7c-0000f13176b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.83.154:45105/i","pattern":"[url:value = 'http://113.230.83.154:45105/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbe74d0-6896-feaf-1a60-00001e7552f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://59.96.139.68:54390/bin.sh","pattern":"[url:value = 'http://59.96.139.68:54390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d387ac08-667c-21e9-1ee3-00008b0bf1a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/bin.sh","pattern":"[url:value = 'http://162.255.251.91:33299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8741220a-e726-25d9-d002-00005f88f7d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/i","pattern":"[url:value = 'http://162.255.251.91:33299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46af6127-dccc-2565-34d2-000045931629","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 8.130.121.151","pattern":"[ipv4-addr:value = '8.130.121.151']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00b9a29-5f26-c1fc-13b8-0000f17f8697","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 138.68.108.72","pattern":"[ipv4-addr:value = '138.68.108.72']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf95b1f-924e-ad85-2325-00009400f936","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.45.236.27","pattern":"[ipv4-addr:value = '99.45.236.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc15af0-6dcb-2247-575b-00003ae1f5bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.183.235","pattern":"[ipv4-addr:value = '99.249.183.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8d9c08-6b82-98ee-4c3d-000094832ac7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.135.86","pattern":"[ipv4-addr:value = '99.249.135.86']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca77332-6d99-ce5d-73e3-0000819f5b7d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.112.236","pattern":"[ipv4-addr:value = '99.249.112.236']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5218c8-4b7a-44b7-8dcf-0000b5ac8a6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.237.52.2","pattern":"[ipv4-addr:value = '99.237.52.2']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f5aa3f-2841-fd18-52a5-0000cb3ed612","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.227.229.131","pattern":"[ipv4-addr:value = '99.227.229.131']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2b68fd-65d0-d063-cabe-00004798399c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.224.131.187","pattern":"[ipv4-addr:value = '99.224.131.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254e6828-6dc3-c22c-6a33-0000bbd7d1a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.61","pattern":"[ipv4-addr:value = '99.114.206.61']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7009ede-cdce-50dc-50f8-0000adef02ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.57","pattern":"[ipv4-addr:value = '99.114.206.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4cd1282-9ac9-f2f4-3d6c-00005fef9c61","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.83.98","pattern":"[ipv4-addr:value = '98.97.83.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0a8a32-6589-d73a-d38a-000045fe3368","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.97.151.71","pattern":"[ipv4-addr:value = '98.97.151.71']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26490dc1-b66a-7e67-00b8-000009b30fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.151.104","pattern":"[ipv4-addr:value = '98.97.151.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6677ea48-efa6-b457-1de8-0000dd9c1b31","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.93.167.141","pattern":"[ipv4-addr:value = '98.93.167.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ebe5aa-3c74-c622-237a-0000216b7252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.92.183.234","pattern":"[ipv4-addr:value = '98.92.183.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--facedf15-486c-d9ba-96ea-0000843a60b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.231.170","pattern":"[ipv4-addr:value = '98.91.231.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a8c93-a31b-636d-7f08-00001b81c1b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.209.6","pattern":"[ipv4-addr:value = '98.91.209.6']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e7ddd2-23bd-91ab-cb56-0000ee8f8f3e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.86.173.85","pattern":"[ipv4-addr:value = '98.86.173.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46cbd134-cd3d-8e83-8b48-0000ef1de453","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.4.49","pattern":"[ipv4-addr:value = '98.80.4.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--803fbfab-78a9-3931-5825-0000b3cef82d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.215.201","pattern":"[ipv4-addr:value = '98.80.215.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850b512e-161d-b96e-b4ff-0000b2885e68","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.43.29.1","pattern":"[ipv4-addr:value = '98.43.29.1']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67a2d89-7c90-d3c8-d8df-00000a7d6a20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.22.145.68","pattern":"[ipv4-addr:value = '98.22.145.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9c6b7a-9b80-a6b2-dd14-0000aa53771d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.202.140.14","pattern":"[ipv4-addr:value = '98.202.140.14']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f00a044-2f54-d6c3-dfbb-0000e720d5c4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.199.111.73","pattern":"[ipv4-addr:value = '98.199.111.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5e612b-249e-11bc-dd83-0000e926e3d4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.254","pattern":"[ipv4-addr:value = '98.190.61.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4c01d0-9d97-ed4b-b10f-000053dc3ae8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.247","pattern":"[ipv4-addr:value = '98.190.61.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30427305-47ea-bb94-1dba-0000119857ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.180.242.243","pattern":"[ipv4-addr:value = '98.180.242.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a442a982-d4da-e333-8d01-0000035cf6ea","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.32.237","pattern":"[ipv4-addr:value = '98.175.32.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cafd304-6990-c54c-9580-0000de5599e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.158.5","pattern":"[ipv4-addr:value = '98.175.158.5']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a809990-0818-c761-5a99-00005d711857","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.61.78","pattern":"[ipv4-addr:value = '98.174.61.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277e3e5c-5cb5-4b37-904f-0000728c9ba0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.246","pattern":"[ipv4-addr:value = '98.174.39.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7113c2-b108-cdcd-80a9-0000d891aa4e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.23","pattern":"[ipv4-addr:value = '98.174.39.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a8e80f-9f58-927f-1355-00008caa2100","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.168.101.144","pattern":"[ipv4-addr:value = '98.168.101.144']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f603f10-98eb-1032-5fe3-00005947c321","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.118.135.235","pattern":"[ipv4-addr:value = '98.118.135.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41a7ef-6085-5720-7779-000034b7a604","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.111.211.243","pattern":"[ipv4-addr:value = '98.111.211.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe2fc09-09d7-843c-437c-0000c02a39b1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.100.78.54","pattern":"[ipv4-addr:value = '98.100.78.54']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef97038-5d46-5d2b-2f35-0000e2795013","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.75.176.87","pattern":"[ipv4-addr:value = '97.75.176.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eea7b1e-7410-d376-9240-0000b6755aac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.176.59","pattern":"[ipv4-addr:value = '97.211.176.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90226756-3415-246b-39e5-00009ad42d26","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.104.169","pattern":"[ipv4-addr:value = '97.211.104.169']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3c2bbd-ce66-edec-458c-0000583450a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.137.143.133","pattern":"[ipv4-addr:value = '97.137.143.133']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c58b29-52f1-373b-c12b-00009bcf81ab","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.125.240.75","pattern":"[ipv4-addr:value = '97.125.240.75']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c98896-f224-ce1f-e65f-0000619b536a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.62.71.3","pattern":"[ipv4-addr:value = '96.62.71.3']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d0e72d-d80d-20dd-bd20-0000bba7b8c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.52.164.34","pattern":"[ipv4-addr:value = '96.52.164.34']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--130c4513-5210-1874-9e80-0000c2ba54ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.27.48.216","pattern":"[ipv4-addr:value = '96.27.48.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a913c4-01c3-0142-f22e-00008ecbf310","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 96.234.71.42","pattern":"[ipv4-addr:value = '96.234.71.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc4eb0-ce72-e121-82e8-0000d04271de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.22.217.74","pattern":"[ipv4-addr:value = '96.22.217.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b0b14-b748-83a8-4dcd-00001c9ff2bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.97.203.206","pattern":"[ipv4-addr:value = '95.97.203.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1ab0b1-a622-7d11-535f-0000935c4542","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.252.87","pattern":"[ipv4-addr:value = '95.85.252.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68a750a-1851-2e54-356e-00007f63389e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.241.219","pattern":"[ipv4-addr:value = '95.85.241.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9495d4e-e0c1-7892-4933-0000dec305a6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.81.217.243","pattern":"[ipv4-addr:value = '95.81.217.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc55a55-9dd2-aa03-92dc-0000e991bf13","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.65.66.242","pattern":"[ipv4-addr:value = '95.65.66.242']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af67332f-4438-01b5-3d25-0000082f4531","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.57.228.130","pattern":"[ipv4-addr:value = '95.57.228.130']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0d27-d413-2d43-3855-00000197dc99","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.49.27.206","pattern":"[ipv4-addr:value = '95.49.27.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b625f1ed-3360-f07c-e846-000084894a23","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.40.120.162","pattern":"[ipv4-addr:value = '95.40.120.162']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b8ff3a-be23-426a-d461-0000ad480761","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.41.116","pattern":"[ipv4-addr:value = '95.27.41.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca38b431-3d62-97af-599d-0000afb20932","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.139.70","pattern":"[ipv4-addr:value = '95.27.139.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b38fece-2224-635d-4326-0000aa9fedce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.216.4.60","pattern":"[ipv4-addr:value = '95.216.4.60']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66323b41-3ee0-f1d4-7e13-0000fd8a427f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.178.113.84","pattern":"[ipv4-addr:value = '95.178.113.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c7a022-f8b6-3ad4-c4fd-0000d4872322","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.177.109.137","pattern":"[ipv4-addr:value = '95.177.109.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f852f326-4714-eb42-ba35-000042896bfd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.173.188.94","pattern":"[ipv4-addr:value = '95.173.188.94']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3672dd89-b8f7-1d74-8fd0-0000b7c00834","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.158.43.234","pattern":"[ipv4-addr:value = '95.158.43.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09b0bc7-1ac3-9c83-beed-0000b68aebb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.153.108.140","pattern":"[ipv4-addr:value = '95.153.108.140']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91235b7-e0ce-22a9-7a93-000058d4b663","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.253","pattern":"[ipv4-addr:value = '95.142.134.253']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20014c59-9feb-7b52-f907-0000b1f0788a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.175","pattern":"[ipv4-addr:value = '95.142.134.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e079fe1e-7717-256a-cdc1-00002ba7b390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.43","pattern":"[ipv4-addr:value = '95.0.32.43']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3aa9ee0-609c-e3d6-7c54-0000ec2a2d28","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.116","pattern":"[ipv4-addr:value = '95.0.32.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa3cf5a-2b50-a67f-9483-0000ee6c9371","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.115","pattern":"[ipv4-addr:value = '95.0.32.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca121f0-0877-2fa7-acb7-0000fd36ce6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.171.24","pattern":"[ipv4-addr:value = '95.0.171.24']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e794f7b1-2f0b-9ba6-e872-00007be4acff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.96.179.223","pattern":"[ipv4-addr:value = '94.96.179.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a57e56-97de-5dcb-a65b-0000febfd561","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.9.233.139","pattern":"[ipv4-addr:value = '94.9.233.139']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9917243-6be9-1810-df18-0000c0bc466a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.45","pattern":"[ipv4-addr:value = '94.78.89.45']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c2847f-494d-cda7-65c8-0000e791a7ef","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.26","pattern":"[ipv4-addr:value = '94.78.89.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa1214a-a012-cc42-c44e-0000e31cdb5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.20","pattern":"[ipv4-addr:value = '94.78.89.20']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3c53bc-ec6a-f0d8-30ea-00001ff148eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.76.14.233","pattern":"[ipv4-addr:value = '94.76.14.233']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f436ec-f6c7-6105-555c-00009892f9a0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.62.83.184","pattern":"[ipv4-addr:value = '94.62.83.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c838ea25-0b7c-7bb6-574f-00000dcfa094","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.50.241.41","pattern":"[ipv4-addr:value = '94.50.241.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c4663d-b309-cabe-0fd1-00006bdac93a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.26.130.173","pattern":"[ipv4-addr:value = '94.26.130.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697fefd0-3694-94cc-9e8c-0000146ee0a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.81.78","pattern":"[ipv4-addr:value = '94.249.81.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1c2b60-073e-1e29-deed-00006ca25fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.87","pattern":"[ipv4-addr:value = '94.249.49.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e0a20c-cabc-a011-b4e6-0000318e5905","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.70","pattern":"[ipv4-addr:value = '94.249.49.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0b8edf-9c9c-fce9-03ae-0000a943bad1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.247.62.199","pattern":"[ipv4-addr:value = '94.247.62.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--789f2ff4-e211-5f6b-9866-00007ee2d252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.236.138.235","pattern":"[ipv4-addr:value = '94.236.138.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d3f5e-b4bd-8136-5d13-000037bd9287","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.187.177","pattern":"[ipv4-addr:value = '94.231.187.177']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0fcae3b-cdc9-408c-9773-0000a83f0206","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.180.184","pattern":"[ipv4-addr:value = '94.231.180.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed2e2fa-4abd-1cbe-9739-000005b4d79c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.222","pattern":"[ipv4-addr:value = '94.23.188.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77dbb340-71ba-8c90-2bb2-000007f269c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.221","pattern":"[ipv4-addr:value = '94.23.188.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc83d6-0b53-a91d-6da0-0000063003f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.220","pattern":"[ipv4-addr:value = '94.23.188.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2927520-91ca-a02d-a00f-00001008d0ae","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.216","pattern":"[ipv4-addr:value = '94.23.188.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9c140c-2637-add8-fcdc-0000138c04c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.214","pattern":"[ipv4-addr:value = '94.23.188.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f881af-b6c7-a6dd-7a87-000016c31245","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.213","pattern":"[ipv4-addr:value = '94.23.188.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ffb139-a1e2-b115-e86a-000017017872","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.212","pattern":"[ipv4-addr:value = '94.23.188.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6e083-4a0e-2522-6f64-00001547c62b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.211","pattern":"[ipv4-addr:value = '94.23.188.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3659f0-f892-0850-02ad-0000a3e8f0f6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.209","pattern":"[ipv4-addr:value = '94.23.188.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c316966-9118-90e2-8a7d-0000a22a9ac1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.208","pattern":"[ipv4-addr:value = '94.23.188.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db894461-11b3-a3a8-3edb-0000a8b4b7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.206","pattern":"[ipv4-addr:value = '94.23.188.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3587254d-a6b5-3dec-82dd-0000ab3063a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.204","pattern":"[ipv4-addr:value = '94.23.188.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce48078-f073-d09d-447a-0000afbd1f17","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.202","pattern":"[ipv4-addr:value = '94.23.188.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45edd1c2-ac74-92fb-bf08-0000adfba14e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.201","pattern":"[ipv4-addr:value = '94.23.188.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32eae154-6851-11fd-db9a-0000ac39cb79","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.200","pattern":"[ipv4-addr:value = '94.23.188.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b25ce0-e565-b284-698e-00009940c5ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.199","pattern":"[ipv4-addr:value = '94.23.188.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb56c76-510e-31ef-0944-00009882af9b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.198","pattern":"[ipv4-addr:value = '94.23.188.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080d4171-97e0-1f56-ba91-0000921c8291","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.196","pattern":"[ipv4-addr:value = '94.23.188.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e603205d-f45c-2905-ccc7-0000919856ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.194","pattern":"[ipv4-addr:value = '94.23.188.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7867b5fe-6390-a06e-5c2b-000094d7407a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.193","pattern":"[ipv4-addr:value = '94.23.188.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377a66d-b456-641b-8173-00004a05336d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.48.249","pattern":"[ipv4-addr:value = '94.207.48.249']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cf4374-60aa-1077-1261-000001653f3a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.29.221","pattern":"[ipv4-addr:value = '94.207.29.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c21c68e-e68f-55b2-ea74-000072e47d4c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.206.148.23","pattern":"[ipv4-addr:value = '94.206.148.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8988a11f-e8eb-b805-e989-0000c968a745","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.204.212.135","pattern":"[ipv4-addr:value = '94.204.212.135']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b84c58-099b-5af0-c568-0000a8eb8a72","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.191.86.165","pattern":"[ipv4-addr:value = '94.191.86.165']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8566c1d8-ed7f-f59e-2c4d-000000618b7a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.254.26","pattern":"[ipv4-addr:value = '94.183.254.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9baa5595-2b83-e0ab-54a8-0000b2d4f3a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.239.85","pattern":"[ipv4-addr:value = '94.183.239.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b44fc-0636-c219-5d40-00006c5b495e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.183.157.246","pattern":"[ipv4-addr:value = '94.183.157.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500192de-05ac-333e-ef85-0000a459f9d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.123.154","pattern":"[ipv4-addr:value = '94.168.123.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d61bb6e-fc21-a5fb-15c2-0000022ef261","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.122.154","pattern":"[ipv4-addr:value = '94.168.122.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619e4620-0f79-df76-a99e-0000afd812b4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.114.250","pattern":"[ipv4-addr:value = '94.168.114.250']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777f20ae-3f04-cbed-18cf-0000ae0975fd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.62.72","pattern":"[ipv4-addr:value = '94.158.62.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd752e71-8193-8392-3134-00004f110b20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.61.229","pattern":"[ipv4-addr:value = '94.158.61.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bffdde7-4ac4-149d-a675-00004cbef390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.60.200","pattern":"[ipv4-addr:value = '94.158.60.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930fadf0-ffb9-ea38-393d-000019381eca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.158.58.127","pattern":"[ipv4-addr:value = '94.158.58.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6b3853-814e-1dee-5a4a-00001c77084f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.58.120","pattern":"[ipv4-addr:value = '94.158.58.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a7b14e-679d-25e3-d760-0000777f851b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.156.37.223","pattern":"[ipv4-addr:value = '94.156.37.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d58da8-2ab7-3b9b-cdf1-000050343c84","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.137.229.234","pattern":"[ipv4-addr:value = '94.137.229.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a93d5d-55fe-2c28-17a2-0000f29e248c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.124.166.111","pattern":"[ipv4-addr:value = '94.124.166.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8910434-4c29-6731-8da2-000019a46c52","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.122.35.32","pattern":"[ipv4-addr:value = '94.122.35.32']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575986f3-f3a2-7fea-14cb-00009ea9701f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.103.3.108","pattern":"[ipv4-addr:value = '94.103.3.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cb7e0d-8e38-bd27-72b0-0000a7f02690","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.102.4.88","pattern":"[ipv4-addr:value = '94.102.4.88']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f3f58a-0253-464b-039e-0000a958b38c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.88.156.13","pattern":"[ipv4-addr:value = '93.88.156.13']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cc2124-b2b8-b65d-042e-00001862c619","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.67.3.46","pattern":"[ipv4-addr:value = '93.67.3.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05e1b2a2-b672-402b-43f5-00001cbdba07","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.184.149.179","pattern":"[ipv4-addr:value = '93.184.149.179']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b9a3c0-9d30-f3e1-2a94-000021c6f288","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.176.165.100","pattern":"[ipv4-addr:value = '93.176.165.100']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a20f0b5-a6ef-69f6-74ff-000081ec31ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.171.184.57","pattern":"[ipv4-addr:value = '93.171.184.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d34f2fb-af4f-d244-39b1-00000118955f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.66.200","pattern":"[ipv4-addr:value = '93.170.66.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e739d730-1362-a251-933b-000062122590","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.117.8","pattern":"[ipv4-addr:value = '93.170.117.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca310bbf-eec1-9989-e7d3-0000516c12e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.152.221.68","pattern":"[ipv4-addr:value = '93.152.221.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f09b072d-c52f-f3dc-d49e-00001bad8cfa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.127.121.67","pattern":"[ipv4-addr:value = '93.127.121.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba57258-751c-c967-edfe-0000698abfc4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.123.109.67","pattern":"[ipv4-addr:value = '93.123.109.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7f7a2a-de5e-a90c-33ae-00007a580a58","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.170.197","pattern":"[ipv4-addr:value = '93.118.170.197']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446e626f-c9ff-2292-1003-0000e43a805f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.169.27","pattern":"[ipv4-addr:value = '93.118.169.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cecb56-a817-b255-8e78-000045b48609","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.164.193","pattern":"[ipv4-addr:value = '93.118.164.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11deb64-3830-3517-a8c2-000093aac763","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.153.229","pattern":"[ipv4-addr:value = '93.118.153.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8d936f-7898-7ede-0acd-00002e800b36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.150.98","pattern":"[ipv4-addr:value = '93.118.150.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9579a3f8-c6bc-b11f-6c4b-00003659bfb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.148.66","pattern":"[ipv4-addr:value = '93.118.148.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--572f46f1-15d3-7636-7eb2-000037fbd05b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.140.9","pattern":"[ipv4-addr:value = '93.118.140.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f10c05b-ac66-e583-f155-000067c8ea12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.92","pattern":"[ipv4-addr:value = '93.118.139.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b19e260-8b6a-ff73-623d-00008e1a20c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.170","pattern":"[ipv4-addr:value = '93.118.139.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab154b7c-1588-db53-367a-0000c767b6da","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.128.115","pattern":"[ipv4-addr:value = '93.118.128.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b350f0-c405-f38e-6fd9-0000da3485d7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.111.10","pattern":"[ipv4-addr:value = '93.118.111.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce62320-546f-ce22-e839-000092006a1b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.117.127.141","pattern":"[ipv4-addr:value = '93.117.127.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff9082a-4378-2010-f631-0000c45348ce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.99.187.41","pattern":"[ipv4-addr:value = '92.99.187.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5bd189-6b85-7991-dc2d-0000be763f36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.97.111.22","pattern":"[ipv4-addr:value = '92.97.111.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca9a6387-0fd8-9d05-639d-0000059a47d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.63.204.159","pattern":"[ipv4-addr:value = '92.63.204.159']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba2fbf7f-fce7-3685-cb61-0000569ac226","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.254","pattern":"[ipv4-addr:value = '92.62.78.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4594a27-5b10-0a54-6f56-0000e92f0d9f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.240","pattern":"[ipv4-addr:value = '92.62.78.240']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073d42f5-ae6e-785c-c65b-000054fa8154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.121.148","pattern":"[ipv4-addr:value = '92.62.121.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a51ea9-0af6-01e3-446e-00002029904b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.52.175.65","pattern":"[ipv4-addr:value = '92.52.175.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4854ab28-8182-6842-67fe-0000b9ba2fb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.39.35","pattern":"[ipv4-addr:value = '92.38.39.35']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1321ce97-e799-a860-2aff-0000e73f5366","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.18.36","pattern":"[ipv4-addr:value = '92.38.18.36']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b966e07-9e67-7922-31d3-000040a85223","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.31.3.72","pattern":"[ipv4-addr:value = '92.31.3.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0baf9165-0e61-0abb-f1ee-00003a6184b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.251.124.73","pattern":"[ipv4-addr:value = '92.251.124.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0c4b6b-eefb-02e4-84c8-0000c2e4c255","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.241.37.47","pattern":"[ipv4-addr:value = '92.241.37.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3524f9a0-b51d-5f54-795b-0000cf857058","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.240.107.161","pattern":"[ipv4-addr:value = '92.240.107.161']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14213a20-d232-3cd8-6ea3-0000f66b5a1c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.222.92.92","pattern":"[ipv4-addr:value = '92.222.92.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01d307-caf4-cfc2-e58d-0000f5780985","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.99","pattern":"[ipv4-addr:value = '92.222.108.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b9fe00-3277-1b31-6d7a-0000ffe6248f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.97","pattern":"[ipv4-addr:value = '92.222.108.97']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbece96-4876-2a2c-abc1-0000fe244eb8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.96","pattern":"[ipv4-addr:value = '92.222.108.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19935681-c43e-7be7-6fdb-00000573f775","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.127","pattern":"[ipv4-addr:value = '92.222.108.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e946617-98ae-f694-08e9-000004b19d42","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.126","pattern":"[ipv4-addr:value = '92.222.108.126']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79d37ad-7a26-9182-34a1-000006f7231b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.125","pattern":"[ipv4-addr:value = '92.222.108.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f9a20e-e138-8137-55e2-000003b8359e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.122","pattern":"[ipv4-addr:value = '92.222.108.122']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0f0f3b4-e615-ce7f-b402-000001fe8bc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.121","pattern":"[ipv4-addr:value = '92.222.108.121']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f7c322-5c7c-b51e-87fe-0000003ce1f0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.120","pattern":"[ipv4-addr:value = '92.222.108.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5062845-3857-935f-cd76-00001d587591","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.119","pattern":"[ipv4-addr:value = '92.222.108.119']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a20118d3-e683-c4f4-7378-00001c9a1fa6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.118","pattern":"[ipv4-addr:value = '92.222.108.118']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32be0542-cb75-2f03-6da4-000017c6589b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.117","pattern":"[ipv4-addr:value = '92.222.108.117']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b935d4-a175-e4cc-ba58-0000160432ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.116","pattern":"[ipv4-addr:value = '92.222.108.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb754f8-e7f3-01b4-ba3a-00001580e6c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.114","pattern":"[ipv4-addr:value = '92.222.108.114']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3c15b-9f66-c787-cd45-000010cff047","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.113","pattern":"[ipv4-addr:value = '92.222.108.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d4f1cd-2e20-14dd-fcd8-0000110d9a70","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.112","pattern":"[ipv4-addr:value = '92.222.108.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbdda077-dd56-f497-23fa-0000134b2429","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.111","pattern":"[ipv4-addr:value = '92.222.108.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acda90e1-2dc9-b66d-dbd3-000012894e1e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.110","pattern":"[ipv4-addr:value = '92.222.108.110']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1a2992-3bd9-f0e6-3f92-0000a42678c3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.108","pattern":"[ipv4-addr:value = '92.222.108.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca20495-73d6-da9f-1576-0000aeb855c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.106","pattern":"[ipv4-addr:value = '92.222.108.106']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ab552f-79ac-2912-2384-0000acfeeb90","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.105","pattern":"[ipv4-addr:value = '92.222.108.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac65b9-cfdf-c68c-479f-0000ad3c81a7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.104","pattern":"[ipv4-addr:value = '92.222.108.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc8f01a-e0c1-e4be-ca2c-0000a8739722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.103","pattern":"[ipv4-addr:value = '92.222.108.103']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d948c1c0-9a08-3d0c-a2c1-0000827a4f0d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.223","pattern":"[ipv4-addr:value = '92.222.104.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4ff156-93ed-3703-db92-000083b8253a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.222","pattern":"[ipv4-addr:value = '92.222.104.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4041907a-1f4f-6aa2-d3a9-0000803cf154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.220","pattern":"[ipv4-addr:value = '92.222.104.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b07b1d-d975-f9a6-cb14-00009d586535","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.219","pattern":"[ipv4-addr:value = '92.222.104.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b74b8b-3bb1-47da-ad65-00009c9a0f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.218","pattern":"[ipv4-addr:value = '92.222.104.218']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f508561a-420b-5511-3528-000097c6483f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.217","pattern":"[ipv4-addr:value = '92.222.104.217']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820f668c-38a4-237e-8160-000096042208","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.216","pattern":"[ipv4-addr:value = '92.222.104.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0107a0-8eaf-a1ee-0cdd-00009580f666","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.214","pattern":"[ipv4-addr:value = '92.222.104.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2659203-4030-d701-aefc-000090cfe0e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.213","pattern":"[ipv4-addr:value = '92.222.104.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8562a295-689f-b197-fc83-0000910d8ad4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.212","pattern":"[ipv4-addr:value = '92.222.104.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6bf32f-b955-a9aa-d090-0000934b348d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.211","pattern":"[ipv4-addr:value = '92.222.104.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6cc3b9-d289-218e-6edc-000092895eba","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.210","pattern":"[ipv4-addr:value = '92.222.104.210']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bab4a5c-a9d1-042e-6397-000025e40250","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.209","pattern":"[ipv4-addr:value = '92.222.104.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac7aca-26b4-d17b-14fd-000024266867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.208","pattern":"[ipv4-addr:value = '92.222.104.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec13675b-8bdb-0cae-0d2c-00002f7a2f5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.207","pattern":"[ipv4-addr:value = '92.222.104.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1457cd-4bdf-22f3-482d-00002eb8456d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.206","pattern":"[ipv4-addr:value = '92.222.104.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--021d0677-4b93-f5b0-82ce-00002cfefb34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.205","pattern":"[ipv4-addr:value = '92.222.104.205']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751a36e1-2e14-94e7-a181-00002d3c9103","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.204","pattern":"[ipv4-addr:value = '92.222.104.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7ea342-f090-9793-60f9-000028738786","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.203","pattern":"[ipv4-addr:value = '92.222.104.203']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0570c26e-78f7-8789-290b-00002bf753e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.201","pattern":"[ipv4-addr:value = '92.222.104.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82f4f4c-c82a-4162-1ccb-00001f4c370a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.199","pattern":"[ipv4-addr:value = '92.222.104.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af287fda-107d-6797-957e-00001e8e5d3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.198","pattern":"[ipv4-addr:value = '92.222.104.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489052dd-2250-a450-0425-000014107037","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.196","pattern":"[ipv4-addr:value = '92.222.104.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1990367-60c0-632a-c755-00001656ce6e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.195","pattern":"[ipv4-addr:value = '92.222.104.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69e33f1-3545-6d48-64b1-00001794a459","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.194","pattern":"[ipv4-addr:value = '92.222.104.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38faa652-e412-e53b-d00e-000012dbb2dc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.193","pattern":"[ipv4-addr:value = '92.222.104.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffd96c4-0dfc-833e-e3f0-00001319d8eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.192","pattern":"[ipv4-addr:value = '92.222.104.192']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5450cfc0-5d27-9b9c-bed4-000065c2ef12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.69.107","pattern":"[ipv4-addr:value = '92.208.69.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5728a44-b985-2d79-406f-00003c9b9660","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.26.16","pattern":"[ipv4-addr:value = '92.208.26.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ce940f-d9e6-7adb-9393-0000d5194971","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.206.133.127","pattern":"[ipv4-addr:value = '92.206.133.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3727915f-9041-4500-771c-00001fc86643","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.184.109.125","pattern":"[ipv4-addr:value = '92.184.109.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9633aa4a-db1d-cda0-abe1-00009976c867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.130.231.52","pattern":"[ipv4-addr:value = '92.130.231.52']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831e4884-32c8-ef9d-31ef-0000820ba4de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.118.39.65","pattern":"[ipv4-addr:value = '92.118.39.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f40eca-6e43-e0e9-eae5-0000734ed41a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.118.112.176","pattern":"[ipv4-addr:value = '92.118.112.176']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2341ea5-0f8b-2ca3-15d8-00008c9c34d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.93.60.178","pattern":"[ipv4-addr:value = '91.93.60.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d32f556-1c89-94d9-f4b6-000084d5025e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.68.200","pattern":"[ipv4-addr:value = '91.92.68.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5adf31a-f275-3034-68dd-0000317a1ffd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.47.201","pattern":"[ipv4-addr:value = '91.92.47.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d651627e-6946-616a-4455-0000b7e33170","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.47.187","pattern":"[ipv4-addr:value = '91.92.47.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6a9ae27-828b-b81f-5c0f-00004e48490e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.42.11","pattern":"[ipv4-addr:value = '91.92.42.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651bc543-4622-2e36-d0a1-000095b9fccf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.41.148","pattern":"[ipv4-addr:value = '91.92.41.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631c7a77-0984-f35f-1fef-0000754da722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.40.183","pattern":"[ipv4-addr:value = '91.92.40.183']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed06267a-f27c-c823-079e-0000a23e4aaa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.241.57","pattern":"[ipv4-addr:value = '91.92.241.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfaa8dd-f02f-a6ca-9001-00004978685f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.211.46","pattern":"[ipv4-addr:value = '91.92.211.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e219ca1d-ead3-cb58-6402-0000213e1686","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.209.22","pattern":"[ipv4-addr:value = '91.92.209.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2b49bd-320b-3acf-cb64-0000fb8861c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.133.195","pattern":"[ipv4-addr:value = '91.92.133.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26facfde-e0b4-8b68-e7ef-0000b183a267","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.90.121.157","pattern":"[ipv4-addr:value = '91.90.121.157']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453a7b2d-cb75-7baa-eb30-0000421e044c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.83.27.92","pattern":"[ipv4-addr:value = '91.83.27.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1cfa0f5-a4ad-6946-5057-00001afea4f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.80.74.137","pattern":"[ipv4-addr:value = '91.80.74.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82bb1fe1-f3d5-5b38-53ce-00006f8efece","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.78.199.11","pattern":"[ipv4-addr:value = '91.78.199.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1bcf0-496b-0e18-481e-0000738876d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.63.142.221","pattern":"[ipv4-addr:value = '91.63.142.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8d50de-f480-c5a9-053f-0000d13316c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.55.119.175","pattern":"[ipv4-addr:value = '91.55.119.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8b8fae-f5f0-149d-cca4-0000e8609070","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.250.7.96","pattern":"[ipv4-addr:value = '91.250.7.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cd63a-819e-6403-0c63-0000effaa899","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.54.82","pattern":"[ipv4-addr:value = '91.242.54.82']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3f6441-cfa7-77c1-f575-0000065e8217","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.53.57","pattern":"[ipv4-addr:value = '91.242.53.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c932022c-1345-de9e-12dc-000072dc709d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.199.173","pattern":"[ipv4-addr:value = '91.242.199.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6befd5c1-ba71-7743-e18f-000081bb1896","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.241.153.105","pattern":"[ipv4-addr:value = '91.241.153.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2138ec3-87c1-1835-27de-00004f345b94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.237.41.59","pattern":"[ipv4-addr:value = '91.237.41.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d46d145-ad61-f89c-e754-0000d939c769","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.41","pattern":"[ipv4-addr:value = '91.236.172.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f44ae6-f45b-1521-19e8-00003bce3c3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.107","pattern":"[ipv4-addr:value = '91.236.172.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051a82e2-bce8-152c-a6ec-0000ca1dc555","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.234.26.163","pattern":"[ipv4-addr:value = '91.234.26.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--214dadca-1e11-2e45-540a-00003c9172f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.139.9","pattern":"[ipv4-addr:value = '91.234.139.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d4419-88ce-600e-695b-00004f5238f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.137.10","pattern":"[ipv4-addr:value = '91.234.137.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a786b2c-195d-19fe-1786-000046b27a2b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.136.237","pattern":"[ipv4-addr:value = '91.234.136.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55eab51f-69f9-596c-a948-0000d3b2af5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.132.155","pattern":"[ipv4-addr:value = '91.234.132.155']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25acc69-c077-58f3-ad6f-0000830e1f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.167.178","pattern":"[ipv4-addr:value = '91.232.167.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34651542-5dde-3ae3-5a16-00000a714e24","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.165.143","pattern":"[ipv4-addr:value = '91.232.165.143']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a30ebd-0b09-8efa-12fa-00001330087c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.99","pattern":"[ipv4-addr:value = '91.231.121.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2dd8426-50f9-f56c-657f-00008ce8c5ed","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.8","pattern":"[ipv4-addr:value = '91.231.121.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d2b711-a78f-b4f0-3df3-0000a33fd0c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.247","pattern":"[ipv4-addr:value = '91.231.121.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478f2001-77af-d814-5e6a-00008796e52b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.226","pattern":"[ipv4-addr:value = '91.231.121.226']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36825a02-d45f-3bd4-8026-00001c6b5fc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.199","pattern":"[ipv4-addr:value = '91.231.121.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--483326bf-a726-ca9a-4c8c-000014b3cc94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.194","pattern":"[ipv4-addr:value = '91.231.121.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cb13c0-86a7-ceac-e5ce-0000eaa7d776","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.120.164","pattern":"[ipv4-addr:value = '91.231.120.164']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e455a626-67a9-97b2-58e4-00005988d281","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.84","pattern":"[ipv4-addr:value = '91.230.225.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e338623f-84d6-d1ba-2b4a-00005e817a5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.80","pattern":"[ipv4-addr:value = '91.230.225.80']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae1fdc-9a3d-97c4-7ad8-00000566be65","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.72","pattern":"[ipv4-addr:value = '91.230.225.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a07ef0-fa3d-7d22-d57a-000006e26a0b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.70","pattern":"[ipv4-addr:value = '91.230.225.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3615f70c-21b7-5e6a-2bf5-00002a8fad8b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.209","pattern":"[ipv4-addr:value = '91.230.225.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aaea9d-c9cd-df93-81da-000021d3eab6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.206","pattern":"[ipv4-addr:value = '91.230.225.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec27be37-ec0a-bb46-ad27-0000193d61b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.195","pattern":"[ipv4-addr:value = '91.230.225.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db997c43-03f3-4555-a4f1-000027044965","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.16","pattern":"[ipv4-addr:value = '91.230.225.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42902df9-e29f-cf8b-4c95-00002542f73c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.15","pattern":"[ipv4-addr:value = '91.230.225.15']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec672039-3b30-db06-c656-00009009f238","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.7","pattern":"[ipv4-addr:value = '91.228.33.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd7f2f6-2fa8-f856-eefe-0000b4b6caf1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.138","pattern":"[ipv4-addr:value = '91.228.33.138']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6c2593-19d4-b3af-fff0-0000b48b21df","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.123.9","pattern":"[ipv4-addr:value = '91.228.123.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b70b591-a68c-a675-053a-000076b2c405","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.122.241","pattern":"[ipv4-addr:value = '91.228.122.241']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfafcbc-b35a-afc0-d354-000059986754","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.86.109","pattern":"[ipv4-addr:value = '91.227.86.109']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bd35830-63a9-baaf-0c29-00001f15c7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.226.66","pattern":"[ipv4-addr:value = '91.227.226.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913edb1b-2ede-bfd3-63ab-00001dd4e2d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.115.112","pattern":"[ipv4-addr:value = '91.226.115.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7f2fa6-fcc6-7cfb-b73a-0000f66fe864","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.113.156","pattern":"[ipv4-addr:value = '91.226.113.156']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f3e1a0-3c0a-a1bd-2428-0000dce944d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.224.92.74","pattern":"[ipv4-addr:value = '91.224.92.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daf1926d-c660-3018-95b8-00006bb18e5e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.69.206","pattern":"[ipv4-addr:value = '91.215.69.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dface50-f525-4fa5-7dc3-000063848c34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.146.234","pattern":"[ipv4-addr:value = '91.215.146.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9056b3-43ba-4afe-122a-0000e8033007","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.214.138.207","pattern":"[ipv4-addr:value = '91.214.138.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0086f5ad-1432-11f0-6b28-0000739d779c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.245.145","pattern":"[ipv4-addr:value = '91.207.245.145']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a86b8eb-5e89-652d-c2a6-0000ddd3a832","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.102.58","pattern":"[ipv4-addr:value = '91.207.102.58']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7390595-d96a-5eed-7c19-0000d9bf9ec4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.198.77.230","pattern":"[ipv4-addr:value = '91.198.77.230']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fa9132-45f1-0bc4-df27-0000cf9b9d74","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.196.228.252","pattern":"[ipv4-addr:value = '91.196.228.252']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d3d28da-2575-1791-6d3c-0000eb816b7f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.7","pattern":"[ipv4-addr:value = '91.196.111.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efb4761-20c4-666f-bb42-000031bd6303","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.127","pattern":"[ipv4-addr:value = '91.196.111.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ffb6e5-249d-4a15-cd73-0000a4e822c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.194.91.202","pattern":"[ipv4-addr:value = '91.194.91.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52425138-be83-6a13-e2d6-0000ae103cf6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.192.204.163","pattern":"[ipv4-addr:value = '91.192.204.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bcbab1-8149-c82c-c42b-0000738947fa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.188.247.151","pattern":"[ipv4-addr:value = '91.188.247.151']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2b4bfc-e12b-629d-ee19-0000fce43eaf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.186.249.112","pattern":"[ipv4-addr:value = '91.186.249.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac7feede-b482-d541-ae5a-0000fdea38bc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.170.9.78","pattern":"[ipv4-addr:value = '91.170.9.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8475d5d-6a0b-63f7-5b30-0000bf2c053a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.16.243.113","pattern":"[ipv4-addr:value = '91.16.243.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa9c42b-f149-3c4a-b3b9-00004f9ad744","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.152.6.16","pattern":"[ipv4-addr:value = '91.152.6.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da80088-a429-5d0b-d83b-000056b9fcc6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.150.213.146","pattern":"[ipv4-addr:value = '91.150.213.146']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de7186d-ad1e-cd6d-258a-000066dc2376","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.146.167.76","pattern":"[ipv4-addr:value = '91.146.167.76']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca187a66-aa62-b466-0f9c-000026942d36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.132.23.25","pattern":"[ipv4-addr:value = '91.132.23.25']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb2c5b8-084e-18bb-74a8-000062f1dd10","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.196.49","pattern":"[ipv4-addr:value = '91.132.196.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df32e150-247e-8015-d8f0-0000c855e3a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.125.26","pattern":"[ipv4-addr:value = '91.132.125.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a826ad91-c471-c3be-3ca2-000065de7f05","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.124.141.50","pattern":"[ipv4-addr:value = '91.124.141.50']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d22902f-baca-8217-0acc-000047f07526","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.103.249.254","pattern":"[ipv4-addr:value = '91.103.249.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa1381cc-fd4a-0e08-02e2-0000581362ca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.70.76.142","pattern":"[ipv4-addr:value = '90.70.76.142']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2dbb16-3d03-f02b-7d8b-0000e5c8d2d3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.52.100.31","pattern":"[ipv4-addr:value = '90.52.100.31']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376e3272-2b5c-1728-725a-0000703dceb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 90.5.122.47","pattern":"[ipv4-addr:value = '90.5.122.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2caa1b1b-1626-b8c4-18dd-000086b09df1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.3.109.42","pattern":"[ipv4-addr:value = '90.3.109.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecab3ee5-dfd1-35ca-d13c-0000478b4584","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.247.51.22","pattern":"[ipv4-addr:value = '90.247.51.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f689efdb-77c8-2149-97c9-0000f79aa699","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.230.22.194","pattern":"[ipv4-addr:value = '90.230.22.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc1d861-27f3-4570-8e78-0000510d78ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.188.231.181","pattern":"[ipv4-addr:value = '90.188.231.181']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]}]}